The OMRON OpenWnn application before 1.3.6 for Android uses weak permissions for unspecified files, which allows attackers to obtain sensitive information via an application that accesses the local filesystem.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Openwnn | Omron | * | 1.3.5 (including) |
| Openwnn | Omron | 1.0 (including) | 1.0 (including) |
| Openwnn | Omron | 1.1 (including) | 1.1 (including) |
| Openwnn | Omron | 1.2 (including) | 1.2 (including) |
| Openwnn | Omron | 1.3 (including) | 1.3 (including) |
| Openwnn | Omron | 1.3.1 (including) | 1.3.1 (including) |
| Openwnn | Omron | 1.3.2 (including) | 1.3.2 (including) |
| Openwnn | Omron | 1.3.3 (including) | 1.3.3 (including) |
| Openwnn | Omron | 1.3.4 (including) | 1.3.4 (including) |
References
- http://jvn.jp/en/jp/JVN01167429/995309/index.html
- http://jvn.jp/en/jp/JVN01167429/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2013-000025
- https://android.googlesource.com/platform/packages/inputmethods/OpenWnn/+/59aefa242169b7a51c2381daee58ff22fd1834ce/ChangeLog.txt
- http://jvn.jp/en/jp/JVN01167429/995309/index.html
- http://jvn.jp/en/jp/JVN01167429/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2013-000025
- https://android.googlesource.com/platform/packages/inputmethods/OpenWnn/+/59aefa242169b7a51c2381daee58ff22fd1834ce/ChangeLog.txt