CVE-2014-8889

Dropbox SDK for Android before 1.6.2 might allow remote attackers to obtain sensitive information via crafted malware or via a drive-by download attack...

CVE-2014-8889

CVE-2014-8889 affects the Dropbox SDK for Android prior to 1.6.2. The issue was an implementation flaw that could enable remote attackers to obtain sensitive information through crafted malware or drive-by exploitation by leaking the nonce used in OAuth authentication, effectively tying a victim ...