CVE-2012-4006: The GREE application before 1.4.0, GREE Tanken Dorirando application before 1.0.7, GREE Tsurisuta applicati...

Security readout for executives and security teams

This is an old Android mobile-app issue affecting several GREE and KDDI&GREE apps. Vulnerable versions mishandled Android WebView, which could let a remote attacker obtain sensitive information through a crafted application. The source bundle does not provide severity scoring, exploit evidence, or detailed remediation beyond affected version boundaries. Exposure is most plausible on legacy Android devices, unmanaged personal devices, or archived/sideloaded APKs running the affected GREE applications below the listed version thresholds. Modern enterprise exposure is likely limited unless these apps remain installed in mobile inventories. Treat as a legacy mobile-app hygiene issue unless affected apps are still present on managed devices. Prioritize inventory confirmation over emergency response because severity, exploitation, and operational prevalence are not established in the provided sources. Mitigation focus: Inventory Android devices for the listed GREE and KDDI&GREE apps.; Upgrade affected apps to versions at or above the listed fixed thresholds.; Remove unsupported legacy APKs if safe updates are unavailable..

Prepared

Jun 28, 2026, 00:52 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.