CVE-2014-5320: Exposure of Sensitive Information to an Unauthorized Actor

The Bump application for Android does not properly handle implicit intents, which allows attackers to obtain sensitive owner-name information via a crafted application...

PT-2014-6404

Name of the Vulnerable Software and Affected Versions The Bump application for Android affected versions not specified Description The issue arises from the application's improper handling of implicit intents, allowing attackers to craft an application that can obtain sensitive owner-name...

Bump for Android vulnerable in handling of implicit intents

Overview Bump for Android is an application that allows users to share information and files. Bump for Android contains a vulnerability in the handling of implicit intents. Gaku Mochizuki of Mitsui Bussan Secure Directions, Inc. reported this vulnerability to IPA. JPCERT/CC coordinated with the...

JVN#08994136: Bump for Android vulnerable in handling of implicit intents

Bump for Android is an application that allows users to share information and files. Bump for Android contains a vulnerability in the handling of implicit intents. Impact Information such as the owner's name that was obtained from another device may be disclosed. Solution Do not use Bump for...

CVE-2014-5076: Exposure of Sensitive Information to an Unauthorized Actor

The La Banque Postale application before 3.2.6 for Android does not prevent the launching of an activity by a component of another application, which allows attackers to obtain sensitive cached banking information via crafted intents, as demonstrated by the drozer framework...

PT-2014-6268

Name of the Vulnerable Software and Affected Versions La Banque Postale application versions prior to 3.2.6 Description The issue allows attackers to obtain sensitive cached banking information via crafted intents. This can be demonstrated using the drozer framework, which shows how an activity c...

CVE-2013-0122

The avast! Mobile Security application before 2.0.4400 for Android allows attackers to cause a denial of service application crash via a crafted application that sends an intent to com.avast.android.mobilesecurity.app.scanner.DeleteFileActivity with zero arguments...

CVE-2012-5182

The Loctouch application 3.4.6 and earlier for Android does not properly handle implicit intents, which allows attackers to obtain sensitive information about logged locations via a crafted application...

Design/Logic Flaw

The Loctouch application 3.4.6 and earlier for Android does not properly handle implicit intents, which allows attackers to obtain sensitive information about logged locations via a crafted application...

CVE-2012-5182

Loctouch for Android (3.4.6 and earlier) is vulnerable due to improper handling of implicit intents, enabling a crafted Android application to access sensitive logged location information. Affected product is Loctouch for Android; the root cause is implicit-intent handling. Impact, as described i...

CVE-2012-5182

The Loctouch application 3.4.6 and earlier for Android does not properly handle implicit intents, which allows attackers to obtain sensitive information about logged locations via a crafted application...

PT-2012-5830

Name of the Vulnerable Software and Affected Versions Loctouch application versions 3.4.6 and earlier Description The issue arises from the Loctouch application's improper handling of implicit intents, allowing attackers to obtain sensitive information about logged locations via a crafted...

CVE-2012-5182: Exposure of Sensitive Information to an Unauthorized Actor

The Loctouch application 3.4.6 and earlier for Android does not properly handle implicit intents, which allows attackers to obtain sensitive information about logged locations via a crafted application...

Loctouch for Android vulnerable in handling of implicit intents

Overview Loctouch for Android contains a vulnerability in the handling of implicit intents. Loctouch provided by NHN Japan, is an application that logs location information. Loctouch for Android contains a vulnerability in the handling of implicit intents. Gaku Mochizuki of Mitsui Bussan Secure...

JVN#42625179: Loctouch for Android vulnerable in handling of implicit intents

Loctouch provided by NHN Japan, is an application that logs location information. Loctouch for Android contains a vulnerability in the handling of implicit intents. Impact Location logs that include non-public information may be leaked to a third party through a malicious Android application...

CVE-2012-4005

The NHN Japan NAVER LINE application before 2.5.5 for Android does not properly handle implicit intents, which allows remote attackers to obtain sensitive message information via a crafted application...

LINE for Android vulnerable in handling of implicit intents

Overview LINE for Android contains a vulnerability in the handling of implicit intents. LINE for Android provided by NHN Japan, is an application for communication with others. LINE for Android contains a vulnerability in the handling of implicit intents. Gaku Mochizuki of Mitsui Bussan Secure...

PT-2012-5132

Name of the Vulnerable Software and Affected Versions NHN Japan NAVER LINE application versions prior to 2.5.5 Description The issue arises from the application's improper handling of implicit intents, allowing remote attackers to obtain sensitive message information via a crafted application...

CVE-2012-4005: Exposure of Sensitive Information to an Unauthorized Actor

The NHN Japan NAVER LINE application before 2.5.5 for Android does not properly handle implicit intents, which allows remote attackers to obtain sensitive message information via a crafted application...

Dolphin Browser HD Cross Application Scripting

1 Background ============ Android applications are executed in a sandbox environment, to ensure that no application can access sensitive information held by another, without adequate privileges. For example, the Dolphin browser application holds sensitive information such as cookies, cache and...