CVE-2011-4872

Multiple HTC Android devices including Desire HD FRG83D and GRI40, Glacier FRG83, Droid Incredible FRF91, Thunderbolt 4G FRG83D, Sensation Z710e GRI40, Sensation 4G GRI40, Desire S GRI40, EVO 3D GRI40, and EVO 4G GRI40 allow remote attackers to obtain 802.1X Wi-Fi credentials and SSID via a craft...

Design/Logic Flaw

Multiple HTC Android devices including Desire HD FRG83D and GRI40, Glacier FRG83, Droid Incredible FRF91, Thunderbolt 4G FRG83D, Sensation Z710e GRI40, Sensation 4G GRI40, Desire S GRI40, EVO 3D GRI40, and EVO 4G GRI40 allow remote attackers to obtain 802.1X Wi-Fi credentials and SSID via a craft...

CVE-2011-4872

Multiple HTC Android devices including Desire HD FRG83D and GRI40, Glacier FRG83, Droid Incredible FRF91, Thunderbolt 4G FRG83D, Sensation Z710e GRI40, Sensation 4G GRI40, Desire S GRI40, EVO 3D GRI40, and EVO 4G GRI40 allow remote attackers to obtain 802.1X Wi-Fi credentials and SSID via a craft...

CVE-2011-4872

The CVE-2011-4872 issue affects multiple HTC Android devices (e.g., Desire HD FRG83D/GRI40, Glacier FRG83, Droid Incredible FRF91, Thunderbolt 4G FRG83D, Sensation lines, EVO lines). A remote attacker with android.permission.ACCESS_WIFI_STATE can call WifiConfiguration.toString() to reveal 802.1X...

CVE-2011-4872: Exposure of Sensitive Information to an Unauthorized Actor

Multiple HTC Android devices including Desire HD FRG83D and GRI40, Glacier FRG83, Droid Incredible FRF91, Thunderbolt 4G FRG83D, Sensation Z710e GRI40, Sensation 4G GRI40, Desire S GRI40, EVO 3D GRI40, and EVO 4G GRI40 allow remote attackers to obtain 802.1X Wi-Fi credentials and SSID via a craft...

PT-2012-1975

Name of the Vulnerable Software and Affected Versions HTC Android devices including Desire HD FRG83D and GRI40, Glacier FRG83, Droid Incredible FRF91, Thunderbolt 4G FRG83D, Sensation Z710e GRI40, Sensation 4G GRI40, Desire S GRI40, EVO 3D GRI40, and EVO 4G GRI40 Description The issue allows remo...

802.1X password exploit on many HTC Android devices

Overview A user's 802.1X WiFi credentials and SSID information may be exposed to any application with basic WiFi permissions on certain HTC builds of Android. Description Any Android application on an affected HTC build with the android.permission.ACCESSWIFISTATE permission can use the .toString...

HTC HD2 TCOM Win 6.5 modify to HTC HD2 Win7 10 Steps

Document Title: =============== HTC HD2 TCOM Win 6.5 modify to HTC HD2 Win7 10 Steps Release Date: ============= 2012-01-13 Vulnerability Laboratory ID VL-ID: ==================================== 381 Discovery Status: ================= Published Exploitation Technique: =======================...

HTC HD2 TCOM Win 6.5 modify to HTC HD2 Win7 10 Steps

Document Title: =============== HTC HD2 TCOM Win 6.5 modify to HTC HD2 Win7 10 Steps Release Date: ============= 2012-01-13 Vulnerability Laboratory ID VL-ID: ==================================== 381 Discovery Status: ================= Published Exploitation Technique: =======================...

TacoRoot

HTC recovery log on some devices is world writable and so can be deleted and symlinked to /data/local.prop to allow root on reboot, this is a appears to be a unstable exploit and requires the user to reboot into recovery mode...

Sprint Disables Carrier IQ Software On Its Devices

Sprint has decided to stop using Carrier IQ’s diagnostic software in light of the ongoing controversy about user privacy, according to reports. A Sprint spokesperson told the Website MobileBurn that the carrier has “weighed customer concerns and…disabled use of the tool so that diagnostic...

[SignalSEC Labs]: HTC Touch2 T3333 Video Player Memory Corruption

Affected Software: HTCVideoPlayer.exe Tested on: HTC Touch2 T3333 - Windows Mobile 6.5 Vulnerability: Memory Corruption Details: HTCVideoPlayer is the default media player of HTC Windows Mobile devices. This media player is prone to a memory corruption vulnerability while parsing stbl atom of 3g2...

HTC Touch2 memory corruption

Memory corruption on 3g2 video files processing...

HTC HD7 "HTCUtility.dll" IOCTL安全限制绕过漏洞

BUGTRAQ ID: 50697 HTC HD7是采用了Windows Phone 7操作系统的智能手机。 HTC HD7在处理0x9020002C IOCTL请求时，其中的HTCUtility.dll驱动程序中存在错误，可被利用读取或写入任意内核内存。 HTC HD7 厂商补丁： HTC --- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.htc.com...

HTC Mobile Device Model Detection (HTC Android)

Binary data 6073.prm...

HTC Mobile Device Model Detection (HTC Windows)

Binary data 6074.prm...

HTC Working on a Fix for Data Leak Problem

Officials at mobile handset maker HTC said they are working on a patch to fix a problem with many of its Android devices that enables any app with Internet permissions to access a large cache of user and device data that a proprietary tool called HTCLoggers collects. The company said on Monday th...

CVE-2011-3975

A certain HTC update for Android 2.3.4 build GRJ22, when the Sense interface is used on the HTC EVO 3D, EVO 4G, ThunderBolt, and unspecified other devices, provides the HtcLoggers.apk application, which allows user-assisted remote attackers to obtain a list of telephone numbers from a log, and...

Code injection

A certain HTC update for Android 2.3.4 build GRJ22, when the Sense interface is used on the HTC EVO 3D, EVO 4G, ThunderBolt, and unspecified other devices, provides the HtcLoggers.apk application, which allows user-assisted remote attackers to obtain a list of telephone numbers from a log, and...

CVE-2011-3975

A certain HTC update for Android 2.3.4 build GRJ22, when the Sense interface is used on the HTC EVO 3D, EVO 4G, ThunderBolt, and unspecified other devices, provides the HtcLoggers.apk application, which allows user-assisted remote attackers to obtain a list of telephone numbers from a log, and...