EUVD-2013-7142

Malware in sbrugna...

Design/Logic Flaw

The engineNextBytes function in classlib/modules/security/src/main/java/common/org/apache/harmony/security/provider/crypto/SHA1PRNGSecureRandomImpl.java in the SecureRandom implementation in Apache Harmony through 6.0M3, as used in the Java Cryptography Architecture JCA in Android before 4.4 and...

PT-2014-3401

Name of the Vulnerable Software and Affected Versions Apache Harmony versions through 6.0M3 Android versions prior to 4.4 Description The issue concerns the SecureRandom implementation, specifically the engineNextBytes function in the SHA1PRNG SecureRandomImpl class. When no seed is provided, it...