PT-2011-4787 · Htc+1 · Htc Devices+1

Egzthunder1 + 2 · Published 2011-10-03 · Updated 2017-08-29 · CVE-2011-3975

Positive Technologies (AI Summary)

CVSS v2.0

2.6

Low

Base vector

AV:N/AC:H/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions HTC devices with Android 2.3.4 build GRJ22

Description The issue allows user-assisted remote attackers to obtain sensitive information, including a list of telephone numbers from a log, by leveraging the android.permission.INTERNET application permission. This is achieved by establishing TCP sessions to 127.0.0.1 on port 65511 and a second port. The HtcLoggers.apk application, provided by a certain HTC update, is the vulnerable component.

Recommendations For HTC devices with Android 2.3.4 build GRJ22, consider restricting the use of the HtcLoggers.apk application until a patch is available. As a temporary workaround, restrict access to the android.permission.INTERNET application permission to minimize the risk of exploitation. Avoid establishing TCP sessions to 127.0.0.1 on port 65511 and the second port used by the HtcLoggers.apk application.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2011-3975

Affected Products

Android

Htc Devices

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2011-3975 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/70270 · Note
• http://androidpolice.com/2011/10/01/massive-security-vulnerability-in-htc-android-devices-evo-3d-4g-thunderbolt-others-exposes-phone-numbers-gps-sms-emails-addresses-much-more · Note
• http://securityfocus.com/bid/49916 · Note
• http://thetechherald.com/article.php/201140/7676/HTC-looking-into-vulnerability-reports · Note
• http://news.cnet.com/8301-1035_3-20114556-94 · Note