CVE-2011-4867

2022-10-0316:15:13

mitre

www.cve.org

cve-2011-4867

tencent qqphoto

android

data protection

vulnerability

remote attackers

contact information

password hash

6.5 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

40.9%

JSON

The Tencent QQPhoto (com.tencent.qqphoto) application 0.97 for Android does not properly protect data, which allows remote attackers to read or modify contact information and a password hash via a crafted application.

References

www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2011-4867-vulnerability-in-QQPhoto.html