EUVD-2012-2211

Malware in sbrugna...

Code injection

The HTC IQRD service for Android on the HTC EVO 4G before 4.67.651.3, EVO Design 4G before 2.12.651.5, Shift 4G before 2.77.651.3, EVO 3D before 2.17.651.5, EVO View 4G before 2.23.651.1, Vivid before 3.26.502.56, and Hero does not restrict localhost access to TCP port 2479, which allows remote...

CVE-2012-2217

The HTC IQRD service for Android on the HTC EVO 4G before 4.67.651.3, EVO Design 4G before 2.12.651.5, Shift 4G before 2.77.651.3, EVO 3D before 2.17.651.5, EVO View 4G before 2.23.651.1, Vivid before 3.26.502.56, and Hero does not restrict localhost access to TCP port 2479, which allows remote...

CVE-2012-2217

The CVE-2012-2217 entry concerns the HTC IQRD service on multiple HTC Android devices (e.g., EVO 4G, EVO Design 4G, Shift 4G, EVO 3D, EVO View 4G, Vivid, Hero) where localhost access to TCP port 2479 is not restricted. This allows remote attackers to perform actions via a crafted app with android...