Digital Clock Weather Widget - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Digital Clock Weather Widget published at the 'play' market has multiple vulnerabilities...

Minimal Weather Info widget - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application Minimal Weather Info widget published at the 'play' market has multiple vulnerabilities...

New Year Weather Widget Theme - Customized SSL, Dangerous filesystem permissions, WebView SSL handling enabled vulnerabilities

HackApp vulnerability scanner discovered that application New Year Weather Widget Theme published at the 'play' market has multiple vulnerabilities...

Microsoft Vista侧栏联系人及天气小工具远程代码执行漏洞（MS07-048）

BUGTRAQ ID: 25306,25304 CVECAN ID: CVE-2007-3891,CVE-2007-3032 Vista是微软发布的最新的操作系统。 Vista侧栏的联系人和天气小工具在解析某些属性时没有执行充分的验证，远程攻击者可能利用此漏洞通过诱使用户执行某些操作来控制系统。 如果用户在联系人小工具中导入添加了恶意的联系人文件，或单击了天气小工具中的恶意链接，就可能导致在系统上运行恶意代码。 Microsoft Windows Vista 临时解决方法： 卸载或禁用天气和联系人小工具 在“组策略”或注册表中禁用侧栏 修改gadget.xml上的访问控制列表以增加限制：...