Android SD Card Content Information Disclosure Vulnerability
BID:45048
Info
Android SD Card Content Information Disclosure Vulnerability
| Bugtraq ID: | 45048 |
| Class: | Design Error |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Nov 25 2010 12:00AM |
| Updated: | Jan 19 2011 05:21PM |
| Credit: | Thomas Cannon |
| Vulnerable: |
Open Handset Alliance Android 2.2 |
| Not Vulnerable: | |
Discussion
Android SD Card Content Information Disclosure Vulnerability
Android is prone to an information-disclosure vulnerability.
A remote attacker can exploit this issue to obtain potentially sensitive information. Information obtained may aid in further attacks.
Android is prone to an information-disclosure vulnerability.
A remote attacker can exploit this issue to obtain potentially sensitive information. Information obtained may aid in further attacks.
Exploit / POC
Android SD Card Content Information Disclosure Vulnerability
An attacker can exploit this issue by enticing an unsuspecting victim to view a malicious webpage.
The following exploit code is available:
An attacker can exploit this issue by enticing an unsuspecting victim to view a malicious webpage.
The following exploit code is available:
Solution / Fix
Android SD Card Content Information Disclosure Vulnerability
Solution:
Currently we are not aware of any patches. If you feel we are in error or if you are aware of more recent
information, please mail us at: [email protected].
Solution:
Currently we are not aware of any patches. If you feel we are in error or if you are aware of more recent
information, please mail us at: [email protected].
References
Android SD Card Content Information Disclosure Vulnerability
References:
References:
- Android Data Stealing Vulnerability (Thomas Cannon)
- Android Homepage (Open Handset Alliance)
- Mobile Device Security and Android File Disclosure (Metasploit)