PT-2010-1930 · Symantec · Symantec Norton Mobile Security

Publicado 2010-11-15 · Atualizado 2017-08-17 · CVE-2010-0113

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Symantec Norton Mobile Security application version 1.0 Beta for Android

Description The issue allows user-assisted remote attackers to obtain potentially sensitive information, including wipe/lock credentials, by leveraging the ability of a separate crafted application to read device logs where setup details are recorded.

Recommendations For Symantec Norton Mobile Security application version 1.0 Beta for Android, consider restricting access to device logs to minimize the risk of sensitive information exposure until a fix is available.

Correção

Enumeração de Fraquezas

CWE-255

Identificadores relacionados

CVE-2010-0113

Produtos afetados

Symantec Norton Mobile Security

Referências · 6

• http://securityfocus.com/bid/44767 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2010-0113 · Nota de Segurança
• http://symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20101111_00 · Nota
• http://vupen.com/english/advisories/2010/2982 · Aviso do Fabricante
• https://exchange.xforce.ibmcloud.com/vulnerabilities/63294 · Nota
• http://osvdb.org/69253 · Nota