PT-2010-1930 · Symantec · Symantec Norton Mobile Security

Published 2010-11-15 · Updated 2017-08-17 · CVE-2010-0113

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Symantec Norton Mobile Security application version 1.0 Beta for Android

Description The issue allows user-assisted remote attackers to obtain potentially sensitive information, including wipe/lock credentials, by leveraging the ability of a separate crafted application to read device logs where setup details are recorded.

Recommendations For Symantec Norton Mobile Security application version 1.0 Beta for Android, consider restricting access to device logs to minimize the risk of sensitive information exposure until a fix is available.

Fix

Weakness Enumeration

CWE-255

Related Identifiers

CVE-2010-0113

Affected Products

Symantec Norton Mobile Security

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2010-0113 · Security Note
• http://vupen.com/english/advisories/2010/2982 · Vendor Advisory
• http://securityfocus.com/bid/44767 · Note
• http://symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=2010&suid=20101111_00 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/63294 · Note
• http://osvdb.org/69253 · Note