CVE-2011-4863

The CVE concerns Tencent QQPimSecure (com.tencent.qqpimsecure) on Android, version 3.0.2. The flaw is a data protection weakness that allows remote attackers to read or modify SMS/MMS messages and the contact list via a crafted application. The vulnerability is described without exploit specifics...

CVE-2011-4866

The CVE-2011-4866 entry concerns the Kaixin001 Android app (com.kaixin001.activity) versions 1.3.1 and 1.3.3. The root cause is improper data protection, allowing remote attackers to read or modify contacts and a cleartext password via a crafted application. Impact is data exposure and integrity ...

CVE-2011-4703

The Limit My Call com.limited.call.view application 2.11 for Android does not properly protect data, which allows remote attackers to read or modify call logs and a contact list via a crafted application...

CVE-2011-4772

The 360 KouXin com.qihoo360.kouxin application 1.5.3 for Android does not properly protect data, which allows remote attackers to read or modify SMS messages and a contact list via a crafted application...

CVE-2011-4700

UberSocial (com.twidroid) for Android, versions 7.x before 7.2.4, has improper data protection that can let a crafted app remotely read or modify Twitter information from the device. Root cause details are not specified in the provided documents. Impact is sensitive Twitter data exposure/influenc...

CVE-2011-4865

The CVE-2011-4865 issue affects Android apps Tencent WBlog 3.3.1 and MicroBlogPad 1.4.0, where data is not protected properly, allowing remote attackers to read or modify message drafts and search keywords via a crafted app. Root cause: insecure data protection within these apps. Impact is data e...

CVE-2011-4772

CVE-2011-4772 affects the Android app 360 KouXin (com.qihoo360.kouxin) version 1.5.3. The issue is improper data protection that allows remote attackers to read or modify SMS messages and a contact list via a crafted application. Root cause: insufficient protection of sensitive data. Impact: conf...

CVE-2011-4864

The Tencent MobileQQ com.tencent.mobileqq application 2.2 for Android does not properly protect data, which allows remote attackers to read or modify messages and a friends list via a crafted application...

CVE-2011-4701

The CallConfirm jp.gr.javaconf.ofnhwx.callconfirm application 2.0.0 for Android does not properly protect data, which allows remote attackers to read or modify allow/block lists via a crafted application...

CVE-2011-4700

The UberMedia UberSocial com.twidroid application 7.x before 7.2.4 for Android does not properly protect data, which allows remote attackers to read or modify Twitter information via a crafted application...

CVE-2011-4864

Technical details about CVE-2011-4864 (affected product, root cause, impact, or exploit info) are not provided in the supplied documents. Monitor for updates from vendors and security advisories.

CVE-2011-4702

CVE-2011-4702 affects the Nimbuzz (com.nimbuzz) Android app versions 2.0.8 and 2.0.10. The description states insufficient data protection allows remote attackers to read or modify a user’s contact list via a crafted application. The available sources repeat the same impact without detailing the ...

CVE-2011-4699

The CVE-2011-4699 entry concerns the Ubermedia Twidroyd Legacy (com.twidroydlegacy) Android app, version 4.3.11. The vulnerability description states that the app does not properly protect data, allowing remote attackers to read or modify Twitter information via a crafted application. CVSSv2 metr...

CVE-2011-4701

The CVE-2011-4701 entry concerns the CallConfirm (jp.gr.java_conf.ofnhwx.callconfirm) Android app (version 2.0.0). The vulnerability is a data-protection flaw that enables remote attackers to read or modify allow/block lists via a crafted application. CVSS metrics (NVD) indicate network access wi...

CVE-2011-4867

The CVE-2011-4867 entry applies to the Android Tencent QQPhoto (com.tencent.qqphoto) app, version 0.97. The vulnerability is described as an improper data protection flaw that allows remote attackers to read or modify contact information and a password hash through a crafted application. The prov...

PT-2012-1948

Name of the Vulnerable Software and Affected Versions Voxofon com.voxofon versions prior to 2.5.2 Description The issue allows remote attackers to read or modify SMS information via a crafted application, due to improper data protection. Recommendations For versions prior to 2.5.2, update to...

PT-2012-1968

Name of the Vulnerable Software and Affected Versions Tencent QQPimSecure version 3.0.2 Description The issue concerns improper data protection, allowing remote attackers to access and modify sensitive information, including SMS/MMS messages and contact lists, by using a crafted application...

CVE-2011-4865: Undefined Security Weakness

The Tencent WBlog com.tencent.WBlog 3.3.1 and MicroBlogPad 1.4.0 applications for Android do not properly protect data, which allows remote attackers to read or modify message drafts and search keywords via a crafted application...

PT-2012-1954

Name of the Vulnerable Software and Affected Versions AnGuanJia com.anguanjia.safe version 2.10.343 Description The issue allows remote attackers to read or modify SMS messages and a contact list via a crafted application, due to improper data protection. Recommendations For version 2.10.343, at...

CVE-2011-4770: Undefined Security Weakness

The QIWI Wallet ru.mw application before 1.14.2 for Android does not properly protect data, which allows remote attackers to read or modify financial information via a crafted application...