PT-2011-1750 · Google · Android

Thomas Cannon · Published 2011-06-09 · Updated 2011-10-27 · CVE-2010-4804

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Medium

Base vector

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Android versions prior to 2.3.4

Description The issue allows remote attackers to obtain SD card contents via crafted content:// URIs, related to (1) BrowserActivity.java and (2) BrowserSettings.java in com/android/browser/.

Recommendations For versions prior to 2.3.4, update to version 2.3.4 or later to resolve the issue.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2010-4804

Affected Products

Android

References · 10

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/android_htmlfileprovider.rb · Exploit
• 🔥 https://github.com/thomascannon/android-cve-2010-4804 · Exploit
• 🔥 https://exploit-db.com/exploits/18164 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2010-4804 · Security Note
• http://thomascannon.net/blog/2010/11/android-data-stealing-vulnerability · Note
• http://android.git.kernel.org/?p=platform/packages/apps/Browser.git%3Ba=commit%3Bh=604a598e1e01bda781600a45e0a971898a582666 · Note
• http://csc.ncsu.edu/faculty/jiang/nexuss.html · Note
• http://android.git.kernel.org/?p=platform/frameworks/base.git%3Ba=commit%3Bh=f440831d76817e837164ca18c7705e81d2391f87 · Note
• http://securityfocus.com/bid/48256 · Note
• http://slashgear.com/android-data-theft-exploit-to-be-plugged-in-gingerbread-video-24116054 · Note