Lucene search

K
cveMitreCVE-2011-4697
HistoryJan 25, 2012 - 4:03 a.m.

CVE-2011-4697

2012-01-2504:03:27
CWE-200
mitre
web.nvd.nist.gov
25
xiaomi
mitalk
messenger
android
security vulnerability
cve-2011-4697
nvd

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

AI Score

6.4

Confidence

Low

EPSS

0.003

Percentile

70.9%

The Xiaomi MiTalk Messenger (com.xiaomi.channel) application before 2.1.320 for Android does not properly protect data, which allows remote attackers to read or modify messaging information via a crafted application.

Affected configurations

Nvd
Node
xiaomimitalk_messengerRange2.1.310
OR
xiaomimitalk_messengerMatch1.0
OR
xiaomimitalk_messengerMatch2.1.280
AND
androidandroid
VendorProductVersionCPE
xiaomimitalk_messenger*cpe:2.3:a:xiaomi:mitalk_messenger:*:*:*:*:*:*:*:*
xiaomimitalk_messenger1.0cpe:2.3:a:xiaomi:mitalk_messenger:1.0:*:*:*:*:*:*:*
xiaomimitalk_messenger2.1.280cpe:2.3:a:xiaomi:mitalk_messenger:2.1.280:*:*:*:*:*:*:*
androidandroid*cpe:2.3:o:android:android:*:*:*:*:*:*:*:*

CVSS2

6.4

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

NONE

AV:N/AC:L/Au:N/C:P/I:P/A:N

AI Score

6.4

Confidence

Low

EPSS

0.003

Percentile

70.9%

Related for CVE-2011-4697