CVE-2012-2649
Estado: ModificadaMedia (6.8)—
The Sleipnir Mobile application 2.2.0 and earlier and Sleipnir Mobile Black Edition application 2.2.0 and earlier for Android allow remote attackers to execute arbitrary Java methods, and obtain sensitive information or execute arbitrary commands, via a crafted web site.
CVSS
- Versión: 2.0
- Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P
- Puntuación base: 6.8
Probabilidad de explotación (EPSS)
- Probabilidad de explotación en los próximos 30 días: 2.03%
- Percentil entre todas las CVEs puntuadas: 80
- Fecha de la puntuación: 5/10/2026
EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).
Tecnologías afectadas (1)
CWE
- CWE-94
Referencias
- http://jvn.jp/en/jp/JVN99730704/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2012-000075
- https://play.google.com/store/apps/details?id=jp.co.fenrir.android.sleipnir
- https://play.google.com/store/apps/details?id=jp.co.fenrir.android.sleipnir_black
- http://jvn.jp/en/jp/JVN99730704/index.html
- http://jvndb.jvn.jp/jvndb/JVNDB-2012-000075
- https://play.google.com/store/apps/details?id=jp.co.fenrir.android.sleipnir
- https://play.google.com/store/apps/details?id=jp.co.fenrir.android.sleipnir_black
JSON original (NVD)
Mostrar
{
"id": "CVE-2012-2649",
"cveTags": [],
"metrics": {
"cvssMetricV2": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"cvssData": {
"version": "2.0",
"baseScore": 6.8,
"accessVector": "NETWORK",
"vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P",
"authentication": "NONE",
"integrityImpact": "PARTIAL",
"accessComplexity": "MEDIUM",
"availabilityImpact": "PARTIAL",
"confidentialityImpact": "PARTIAL"
},
"acInsufInfo": false,
"impactScore": 6.4,
"baseSeverity": "MEDIUM",
"obtainAllPrivilege": false,
"exploitabilityScore": 8.6,
"obtainUserPrivilege": false,
"obtainOtherPrivilege": false,
"userInteractionRequired": true
}
]
},
"affected": [
{
"source": "vultures@jpcert.or.jp",
"affectedData": [
{
"vendor": "n/a",
"product": "n/a",
"versions": [
{
"status": "affected",
"version": "n/a"
}
]
}
]
}
],
"published": "2012-08-08T18:55:01.933",
"references": [
{
"url": "http://jvn.jp/en/jp/JVN99730704/index.html",
"source": "vultures@jpcert.or.jp"
},
{
"url": "http://jvndb.jvn.jp/jvndb/JVNDB-2012-000075",
"source": "vultures@jpcert.or.jp"
},
{
"url": "https://play.google.com/store/apps/details?id=jp.co.fenrir.android.sleipnir",
"source": "vultures@jpcert.or.jp"
},
{
"url": "https://play.google.com/store/apps/details?id=jp.co.fenrir.android.sleipnir_black",
"source": "vultures@jpcert.or.jp"
},
{
"url": "http://jvn.jp/en/jp/JVN99730704/index.html",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "http://jvndb.jvn.jp/jvndb/JVNDB-2012-000075",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://play.google.com/store/apps/details?id=jp.co.fenrir.android.sleipnir",
"source": "af854a3a-2127-422b-91ae-364da2661108"
},
{
"url": "https://play.google.com/store/apps/details?id=jp.co.fenrir.android.sleipnir_black",
"source": "af854a3a-2127-422b-91ae-364da2661108"
}
],
"vulnStatus": "Modified",
"weaknesses": [
{
"type": "Primary",
"source": "nvd@nist.gov",
"description": [
{
"lang": "en",
"value": "CWE-94"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "The Sleipnir Mobile application 2.2.0 and earlier and Sleipnir Mobile Black Edition application 2.2.0 and earlier for Android allow remote attackers to execute arbitrary Java methods, and obtain sensitive information or execute arbitrary commands, via a crafted web site."
},
{
"lang": "es",
"value": "La aplicación Sleipnir Mobile v2.2.0 y versiones anteriores y la aplicación Sleipnir Mobile Negro Edition v2.2.0 y versiones anteriores para Android permite a atacantes remotos ejecutar los métodos de Java, y obtener información sensible o ejecutar comandos arbitrarios, a través de un sitio web diseñado."
}
],
"lastModified": "2026-06-16T23:41:48.670",
"configurations": [
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:fenrir-inc:sleipnir_mobile:*:-:black:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B88FF6E6-44D9-4EA5-8504-6B316F7A36CC",
"versionEndIncluding": "2.2.0"
},
{
"criteria": "cpe:2.3:a:fenrir-inc:sleipnir_mobile:1.0.0:alpha:black:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DA5B020D-8DD0-4D36-91E1-839D3224B7FA"
},
{
"criteria": "cpe:2.3:a:fenrir-inc:sleipnir_mobile:1.0.0:beta_update1:black:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "2D3321AE-7572-4CC0-A4BF-B22F3DCA7FDB"
},
{
"criteria": "cpe:2.3:a:fenrir-inc:sleipnir_mobile:1.0.0:rc:black:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A28BEC46-501E-4D10-827F-F59D40A11CB4"
},
{
"criteria": "cpe:2.3:a:fenrir-inc:sleipnir_mobile:1.1.0:-:black:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "81943E1A-A543-4BCD-9A93-EF22F38C3776"
},
{
"criteria": "cpe:2.3:a:fenrir-inc:sleipnir_mobile:1.2.0:-:black:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F6B2C471-87F3-46BB-B68E-E35109948A28"
},
{
"criteria": "cpe:2.3:a:fenrir-inc:sleipnir_mobile:1.3.0:-:black:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1D1B9092-6C0D-4C36-BE46-3135926189F1"
},
{
"criteria": "cpe:2.3:a:fenrir-inc:sleipnir_mobile:1.4.0:-:black:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "576975B3-F9B8-4AD7-A29C-54BDAFAE273E"
},
{
"criteria": "cpe:2.3:a:fenrir-inc:sleipnir_mobile:1.5.0:-:black:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0E59E3FC-F8A7-4E67-B426-FBA6E59C8C9E"
},
{
"criteria": "cpe:2.3:a:fenrir-inc:sleipnir_mobile:1.5.1:-:black:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "099C6540-9635-4265-8BCB-F645312418FE"
},
{
"criteria": "cpe:2.3:a:fenrir-inc:sleipnir_mobile:1.6.0:-:black:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DBBF59C7-FECE-4DD1-9291-4C13D508DC17"
},
{
"criteria": "cpe:2.3:a:fenrir-inc:sleipnir_mobile:1.7.0:-:black:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7A2A8F75-5819-4936-ABFF-5B39C6341F8D"
},
{
"criteria": "cpe:2.3:a:fenrir-inc:sleipnir_mobile:1.7.1:-:black:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "D150DDD4-9372-4AE5-A3D5-6314AD0853FF"
},
{
"criteria": "cpe:2.3:a:fenrir-inc:sleipnir_mobile:2.0.0:-:black:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "48BB80C7-2D4C-491F-A3CC-22DA9A9184F5"
},
{
"criteria": "cpe:2.3:a:fenrir-inc:sleipnir_mobile:2.0.1:-:black:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "86451F7E-2B6E-4708-AC7C-BE407D3540C6"
},
{
"criteria": "cpe:2.3:a:fenrir-inc:sleipnir_mobile:2.0.2:-:black:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A7F39BB9-4140-4FE2-98AA-B341F64083B3"
},
{
"criteria": "cpe:2.3:a:fenrir-inc:sleipnir_mobile:2.0.3:-:black:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4892F4DC-B60F-4C2A-A3FE-6EF298F40F50"
},
{
"criteria": "cpe:2.3:a:fenrir-inc:sleipnir_mobile:2.0.4:-:black:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "25522D1E-6C83-43A2-8159-536599C96BB8"
},
{
"criteria": "cpe:2.3:a:fenrir-inc:sleipnir_mobile:2.1.0:-:black:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F2919501-49B6-4A68-806D-2FD1D279BF72"
}
],
"operator": "OR"
}
]
},
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:fenrir-inc:sleipnir_mobile:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "0DDE9C19-2091-4259-AD09-658FDB8FF632",
"versionEndIncluding": "2.2.0"
},
{
"criteria": "cpe:2.3:a:fenrir-inc:sleipnir_mobile:1.0.0:alpha:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DA07915B-2FE8-4221-A025-DAC5A75A1DCB"
},
{
"criteria": "cpe:2.3:a:fenrir-inc:sleipnir_mobile:1.0.0:beta_update1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F2902659-270F-438F-937D-8CCB59CF6118"
},
{
"criteria": "cpe:2.3:a:fenrir-inc:sleipnir_mobile:1.0.0:rc:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "04620C25-02F3-460A-A1AE-470B3C40013E"
},
{
"criteria": "cpe:2.3:a:fenrir-inc:sleipnir_mobile:1.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DC33DC4D-5F7B-4941-AAF5-4FA0DD04637E"
},
{
"criteria": "cpe:2.3:a:fenrir-inc:sleipnir_mobile:1.2.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E5FB5C98-CB3D-4307-9B5D-491EFF911645"
},
{
"criteria": "cpe:2.3:a:fenrir-inc:sleipnir_mobile:1.3.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "080CBAC1-4D96-43BD-9068-5398FEC3C44A"
},
{
"criteria": "cpe:2.3:a:fenrir-inc:sleipnir_mobile:1.4.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F0A2CBA2-E4D7-46CE-9617-8C38CDDBC662"
},
{
"criteria": "cpe:2.3:a:fenrir-inc:sleipnir_mobile:1.5.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B4DA4D0B-44C6-45B3-9ED0-A0C308E71EB5"
},
{
"criteria": "cpe:2.3:a:fenrir-inc:sleipnir_mobile:1.5.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "DB8ED8D7-70BF-4889-A416-BF1FBB8E63BF"
},
{
"criteria": "cpe:2.3:a:fenrir-inc:sleipnir_mobile:1.6.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "74B07D69-2DB1-4E44-96F9-246C7B2758E2"
},
{
"criteria": "cpe:2.3:a:fenrir-inc:sleipnir_mobile:1.7.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1B8A6B1B-56F7-43B5-9A23-E7A05FFBD1E0"
},
{
"criteria": "cpe:2.3:a:fenrir-inc:sleipnir_mobile:1.7.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "7B900B61-CF5F-4CF5-96D4-CE0E06131A0A"
},
{
"criteria": "cpe:2.3:a:fenrir-inc:sleipnir_mobile:2.0.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "9A183983-B813-48F3-870F-FB46A2A2C040"
},
{
"criteria": "cpe:2.3:a:fenrir-inc:sleipnir_mobile:2.0.1:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "3F2E802E-2F1C-470E-9D8B-C0E795FBCA85"
},
{
"criteria": "cpe:2.3:a:fenrir-inc:sleipnir_mobile:2.0.2:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "F483B292-70B2-4ACB-A289-E83B903C2DBF"
},
{
"criteria": "cpe:2.3:a:fenrir-inc:sleipnir_mobile:2.0.3:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "32CB09CB-4EC5-4E50-B09C-8ABD73D39B53"
},
{
"criteria": "cpe:2.3:a:fenrir-inc:sleipnir_mobile:2.0.4:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "41A6C11D-C1D4-4D8F-B001-E0291A613296"
},
{
"criteria": "cpe:2.3:a:fenrir-inc:sleipnir_mobile:2.1.0:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "A82B5677-139B-40D1-90C3-27F7D67E899C"
}
],
"operator": "OR"
}
]
}
],
"sourceIdentifier": "vultures@jpcert.or.jp"
}