CVE-2012-4013

CVE-2012-4013 describes a vulnerability in the WebView class of the Cybozu KUNAI Browser for Remote Service application beta for Android. This flaw allows remote attackers to execute arbitrary JavaScript code and potentially obtain sensitive information. The attack requires a crafted application to place malicious JavaScript into a local file accessed via a file: URL. The vulnerability has a CVSS score of 4.3 (Medium), indicating a network-based attack with medium complexity and potential for partial confidentiality impact, but no integrity or availability impact. Its EPSS score is very low, suggesting a minimal likelihood of exploitation. There is no evidence of active exploitation, and no public exploit code (Metasploit, Nuclei, ExploitDB) is available. The vulnerability has received no community discussion or media coverage, further indicating a low level of attention and perceived threat.