The mixi application before 4.3.0 for Android allows remote attackers to read potentially sensitive information in friends' comments via a crafted application that leverages the storage of these comments on an SD card.
Publication date: Sat, 18 Aug 2012 01:55:00 +0000