VIR Vulnerability Intelligence Relay

CVE-2012-5187

medium
Published 2013-02-06 · Modified 2026-04-29
💬 Discuss on Community ✚ Propose mitigation
CVSS v3
—
CVSS v4 NEW
—
not yet in upstream
VIR risk
4.3

Description

The Weathernews Touch application 2.3.2 and earlier for Android allows attackers to obtain sensitive information about logged locations via a crafted application that leverages read permission for system log files.

Predictions

Exploit likelihood
20%
Patch ETA
—

Heuristic predictions, AS-IS, for prioritization only.

Mitigations

No mitigations published for this CVE yet.

The vendor-content worker queues fetches as references arrive (check back in a few minutes). Or — if you've already worked around this in production — publish your fix to the community-verified tier.

✚ Propose a mitigation on Community → Mitigations published via the community go through AI scoring + 2 human reviewers + 7-day silent objection window before landing here with source_tier=community-verified.

Application impact
VendorProductVersionsFixed
weathernewsweathernews_touch{"endIncluding":"2.3.2"}
weathernewsweathernews_touch1.20
weathernewsweathernews_touch1.23
weathernewsweathernews_touch1.33
weathernewsweathernews_touch1.35
weathernewsweathernews_touch1.38
weathernewsweathernews_touch1.39
weathernewsweathernews_touch1.40
weathernewsweathernews_touch1.43
weathernewsweathernews_touch1.44
weathernewsweathernews_touch1.49
weathernewsweathernews_touch1.50
weathernewsweathernews_touch1.51
weathernewsweathernews_touch1.53
weathernewsweathernews_touch1.55
weathernewsweathernews_touch1.58
weathernewsweathernews_touch1.64
weathernewsweathernews_touch1.65
weathernewsweathernews_touch1.66
weathernewsweathernews_touch1.67
weathernewsweathernews_touch1.68
weathernewsweathernews_touch2.0.0
weathernewsweathernews_touch2.1.0
weathernewsweathernews_touch2.1.1
weathernewsweathernews_touch2.2.0
weathernewsweathernews_touch2.3.1

References

CWEs

CWE-264

Community-verified mitigations for this CVE will appear above when contributors publish them.

Verify integrity in audit chain (admin only). AS-IS.