CVE-2011-1717

Skype for Android stores sensitive user data without encryption in sqlite3 databases with weak permissions, allowing a local attacker to read user IDs, contacts, phone numbers, date of birth, IM logs, and other private information. The vulnerability stems from inadequate access controls on stored...