PT-2021-17502 · Genymotion · Genymotion Desktop

Eybisi · Published 2021-02-22 · Updated 2024-08-03 · CVE-2021-27549

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Genymotion Desktop versions 3.2.0 and earlier

Description The issue concerns the leakage of the host's clipboard data to the Android application by default. It is worth noting that the vendor considers this behavior as intended and configurable through the Settings > Device screen.

Recommendations For Genymotion Desktop versions 3.2.0 and earlier, consider changing the settings through the Settings > Device screen to alter the default behavior and prevent the host's clipboard data from being leaked to the Android application.

Exploit

Fix

Cleartext Storage of Sensitive Information

Weakness Enumeration

CWE-312

Related Identifiers

CVE-2021-27549

Affected Products

Genymotion Desktop

References · 10

• 🔥 https://youtube.com/watch?v=Tod8Q6sf0P8 · Exploit
• https://osv.dev/vulnerability/CVE-2021-27549 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2021-27549 · Security Note
• https://docs.genymotion.com/desktop/latest/02_Application.html · Vendor Advisory
• https://github.com/eybisi/misc/tree/main/clipwatch · Note
• https://t.me/cvenotify/88850 · Telegram Post
• https://twitter.com/0xabc0/status/1363788023956185090 · Note
• https://twitter.com/0xabc0/status/1363855602477387783 · Note
• https://genymotion.com/download · Note
• https://twitter.com/0xabc0/status/1363856804602671104 · Note