PT-2011-4787 · Htc+1 · Htc Devices+1

Egzthunder1 + 2 · Publicado 2011-10-03 · Atualizado 2017-08-29 · CVE-2011-3975

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Baixa

Vetor base

AV:N/AC:H/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions HTC devices with Android 2.3.4 build GRJ22

Description The issue allows user-assisted remote attackers to obtain sensitive information, including a list of telephone numbers from a log, by leveraging the android.permission.INTERNET application permission. This is achieved by establishing TCP sessions to 127.0.0.1 on port 65511 and a second port. The HtcLoggers.apk application, provided by a certain HTC update, is the vulnerable component.

Recommendations For HTC devices with Android 2.3.4 build GRJ22, consider restricting the use of the HtcLoggers.apk application until a patch is available. As a temporary workaround, restrict access to the android.permission.INTERNET application permission to minimize the risk of exploitation. Avoid establishing TCP sessions to 127.0.0.1 on port 65511 and the second port used by the HtcLoggers.apk application.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2011-3975

Produtos afetados

Android

Htc Devices

Referências · 6

• https://exchange.xforce.ibmcloud.com/vulnerabilities/70270 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2011-3975 · Nota de Segurança
• http://androidpolice.com/2011/10/01/massive-security-vulnerability-in-htc-android-devices-evo-3d-4g-thunderbolt-others-exposes-phone-numbers-gps-sms-emails-addresses-much-more · Nota
• http://securityfocus.com/bid/49916 · Nota
• http://thetechherald.com/article.php/201140/7676/HTC-looking-into-vulnerability-reports · Nota
• http://news.cnet.com/8301-1035_3-20114556-94 · Nota