CVE-2012-6334
Summary
| CVE | CVE-2012-6334 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2012-12-31 11:50:00 UTC |
| Updated | 2015-11-10 18:58:00 UTC |
| Description | The Track My Mobile feature in the SamsungDive subsystem for Android on Samsung Galaxy devices does not properly implement Location APIs, which allows physically proximate attackers to provide arbitrary location data via a "commonly available simple GPS location spoofer." |
Risk And Classification
Problem Types: CWE-264
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Hardware | Samsung | Galaxy Note 2 | - | All | All | All |
| Hardware | Samsung | Galaxy Note 2 | - | All | All | All |
| Hardware | Samsung | Galaxy S | - | All | All | All |
| Hardware | Samsung | Galaxy S | - | All | All | All |
| Hardware | Samsung | Galaxy S2 | - | All | All | All |
| Hardware | Samsung | Galaxy S2 | - | All | All | All |
| Application | Samsung | Samsungdive | - | All | All | All |
| Application | Samsung | Samsungdive | - | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| GPS based tracking service provided by Samsung vulnerable to thieves - Hacking News | MISC | thehackernews.com | |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.