PT-2017-6297 · Dropbox · Dropbox Sdk For Android

Publicado 2017-09-25 · Atualizado 2018-10-09 · CVE-2014-8889

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Baixa

Vetor base

AV:N/AC:H/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Dropbox SDK for Android versions prior to 1.6.2

Description The issue might allow remote attackers to obtain sensitive information via crafted malware or via a drive-by download attack.

Recommendations For versions prior to 1.6.2, update to version 1.6.2 or later to resolve the issue.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2014-8889

Produtos afetados

Dropbox Sdk For Android

Referências · 6

• http://packetstormsecurity.com/files/130767/Dropbox-SDK-For-Android-Remote-Exploitation.html · Nota
• https://securityintelligence.com/droppedin-remotely-exploitable-vulnerability-in-the-dropbox-sdk-for-android · Nota
• http://seclists.org/fulldisclosure/2015/Mar/61 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-8889 · Nota de Segurança
• http://securityfocus.com/archive/1/534843/100/1500/threaded · Nota
• http://securityfocus.com/bid/73035 · Nota