A weakness has been reported in Yome Collection for Android, which can be exploited by malicious people to disclose certain system information.

The weakness is caused due to the application storing the "International Mobile Equipment Identity" (IMEI) of a device in an insecure way, which can be exploited to disclose the IMEI.

Successful exploitation requires that a malicious application is installed.

The weakness is reported in versions 1.8.3 and prior.

Solution
Update to the latest version.

Provided and/or discovered by
JVN credits Kazuhiko Kusano of Graduate School of Information Sciences, Tohoku University

Original Advisory
JVN:
http://jvn.jp/en/jp/JVN05102851/index.html
http://jvndb.jvn.jp/en/contents/2012/JVNDB-2012-000064.html

Deep Links
Links available to Secunia VIM customers