PT-2012-1825 · Google · Android
Published
2012-01-25
·
Updated
2012-01-26
·
CVE-2011-4276
CVSS v2.0
4.3
Medium
| Vector | AV:N/AC:M/Au:N/C:P/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
Android versions prior to 2.3.6
Description
The issue allows remote attackers within Bluetooth range to obtain contact data via an AT phonebook transfer, specifically targeting the Bluetooth service in the com/android/phone/BluetoothHeadsetService.java component.
Recommendations
For versions prior to 2.3.6, update to version 2.3.6 or later to resolve the issue.
Fix
Information Disclosure
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Android