Lucene search
HistoryOct 03, 2022 - 4:15 p.m.
CVE-2011-4864
tencent
mobileqq
com.tencent.mobileqq
android
data protection
remote attackers
messages
friends list
security vulnerability
5.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
6.7 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
40.9%
The Tencent MobileQQ (com.tencent.mobileqq) application 2.2 for Android does not properly protect data, which allows remote attackers to read or modify messages and a friends list via a crafted application.
Affected configurations
Node
tencentmobileqqMatch2.2
googleandroid
| CPE | Name | Operator | Version |
|---|---|---|---|
| tencent:mobileqq | tencent mobileqq | eq | 2.2 |
Related
prion
prion
Design/Logic Flaw
2012-01-25 04:03:00
cvelist
cvelist
CVE-2011-4864
2022-10-03 16:15:14
nvd
nvd
CVE-2011-4864
2012-01-25 04:03:28
seebug
seebug
Tencent(腾讯)手机QQ for Android 权限许可和访问控制漏洞
2012-02-01 00:00:00
5.8 Medium
CVSS2
Attack Vector
NETWORK
Attack Complexity
MEDIUM
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
NONE
AV:N/AC:M/Au:N/C:P/I:P/A:N
6.7 Medium
AI Score
Confidence
Low
0.001 Low
EPSS
Percentile
40.9%
Related for CVE-2011-4864