Open Handset Alliance Android 'content://' URI Multiple Information Disclosure Vulnerabilities

Bugtraq ID:	48256
Class:	Design Error
CVE:	CVE-2010-4804
Remote:	Yes
Local:	No
Published:	Jun 13 2011 12:00AM
Updated:	Nov 28 2011 06:26PM
Credit:	Thomas Cannon
Vulnerable:	Open Handset Alliance Android 2.3.2 Open Handset Alliance Android 2.3.1 Open Handset Alliance Android 2.0.1 Open Handset Alliance Android 2.3 Open Handset Alliance Android 2.2 Open Handset Alliance Android 2.1.1 Open Handset Alliance Android 2.1 Open Handset Alliance Android 2.0
Not Vulnerable:	Open Handset Alliance Android 2.3.4

Open Handset Alliance Android 'content://' URI Multiple Information Disclosure Vulnerabilities

Open Handset Alliance Android is prone to multiple information-disclosure vulnerabilities in the browser application.

A remote attacker can exploit these issues to obtain potentially sensitive information that is stored on an SD card. Information obtained may aid in further attacks.

Open Handset Alliance Android 'content://' URI Multiple Information Disclosure Vulnerabilities

To exploit these issues, an attacker must determine the path and filename of a targeted file and entice an unsuspecting user to visit a specially crafted website.

The following exploit is available:

• /data/vulnerabilities/exploits/48256.php

Open Handset Alliance Android 'content://' URI Multiple Information Disclosure Vulnerabilities

Solution:
Updates are available. Please see the references for more information.

Open Handset Alliance Android 'content://' URI Multiple Information Disclosure Vulnerabilities

References:

• Android Data Stealing Vulnerability (Thomas Cannon)
  
• Android Homepage (Open Handset Alliance)