Update Adobe Reader app for Android to Patch Remote Code Execution Vulnerability

If you're one of the 400 million Android users out there who have installed Adobe Reader app that helps you to view PDF documents on mobile devices, then you should immediately update your app from Google Play Store. Adobe has released an updated Adobe Reader 11.2.0 version to addresses an...

CVE-2014-1969

Directory traversal vulnerability in the apps4u@android SD Card Manager application before 20140224 for Android allows attackers to overwrite or create arbitrary files via a crafted filename...

CVE-2014-1969

Directory traversal vulnerability in the apps4u@android SD Card Manager application before 20140224 for Android allows attackers to overwrite or create arbitrary files via a crafted filename...

CVE-2014-1969

CVE-2014-1969 affects the apps4u@android SD Card Manager for Android. The vulnerability is a directory traversal (CWE-22) in filename handling that may allow a remote, unauthenticated attacker to create or overwrite arbitrary files in directories the app can access. Root cause: improper processin...

SD Card Manager vulnerable to directory traversal

Overview SD Card Manager provided by apps4u@android contains an issue in processing file names, which may result in a directory traversal CWE-22 vulnerability. Ryohei Koike of Sakura Information Systems Co., Ltd. reported this vulnerability to IPA. JPCERT/CC coordinated with the developer under...

JVN#47386847: SD Card Manager vulnerable to directory traversal

SD Card Manager provided by apps4u@android contains an issue in processing file names, which may result in a directory traversal CWE-22 vulnerability. Impact A remote, unauthenticated attacker may create an arbitrary file or overwrite an existing file in a directory that the application has...

CVE-2014-1969: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the apps4u@android SD Card Manager application before 20140224 for Android allows attackers to overwrite or create arbitrary files via a crafted filename...

PT-2014-4392

Name of the Vulnerable Software and Affected Versions apps4u@android SD Card Manager version prior to 20140224 Description A directory traversal issue in the SD Card Manager application allows attackers to overwrite or create arbitrary files by using a crafted filename. Recommendations For versio...

CVE-2014-1515

Mozilla Firefox before 28.0.1 on Android processes a file: URL by copying a local file onto the SD card, which allows attackers to obtain sensitive information from the Firefox profile directory via a crafted application...

CVE-2014-1515

Mozilla Firefox before 28.0.1 on Android processes a file: URL by copying a local file onto the SD card, which allows attackers to obtain sensitive information from the Firefox profile directory via a crafted application...

CVE-2014-1515

CVE-2014-1515 affects Mozilla Firefox for Android prior to 28.0.1. It occurs when processing a file: URL by copying a local file to the SD card, allowing an attacker with a crafted application to read sensitive data from the Firefox profile directory. CVSSv2 base score 1.9 (LOW) with LOCAL access...

CVE-2014-1515: Exposure of Sensitive Information to an Unauthorized Actor

Mozilla Firefox before 28.0.1 on Android processes a file: URL by copying a local file onto the SD card, which allows attackers to obtain sensitive information from the Firefox profile directory via a crafted application...

File: protocol links downloaded to SD card by default — Mozilla

Security researcher Roee Hay reported that a hyperlink using the file: protocol on Firefox for Android could link to a local file in the Firefox profile directory. If a user selected this link on their device, the linked file would be copied to the SD card without prompting. This SD card location...

Code injection

The application link interface in the NTT DOCOMO sp mode mail application 6100 through 6300 for Android 4.0.x and 6130 through 6700 for Android 4.1 through 4.4 writes message content to the SD card during e-mail composition, which allows attackers to obtain sensitive information via a crafted...

CVE-2014-1978

The application link interface in the NTT DOCOMO sp mode mail application 6100 through 6300 for Android 4.0.x and 6130 through 6700 for Android 4.1 through 4.4 writes message content to the SD card during e-mail composition, which allows attackers to obtain sensitive information via a crafted...

CVE-2014-1978

The CVE-2014-1978 issue concerns the NTT DOCOMO sp mode mail application for Android (versions 6100–6300 on Android 4.0.x and 6130–6700 on Android 4.1–4.4). The vulnerability arises from the application link interface, which writes message content to the device’s SD card during email composition....

PT-2014-4400

Name of the Vulnerable Software and Affected Versions NTT DOCOMO sp mode mail application versions 6100 through 6300 for Android 4.0.x NTT DOCOMO sp mode mail application versions 6130 through 6700 for Android 4.1 through 4.4 Description The issue allows attackers to obtain sensitive information...

CVE-2014-1978: Undefined Security Weakness

The application link interface in the NTT DOCOMO sp mode mail application 6100 through 6300 for Android 4.0.x and 6130 through 6700 for Android 4.1 through 4.4 writes message content to the SD card during e-mail composition, which allows attackers to obtain sensitive information via a crafted...

sp mode mail issue where emails in the process of creation may be accessed

Overview sp mode mail provided by NTT DOCOMO contains an application link interface so that mail data can be exchanged with external application during email creation. When the application to be linked is selected, the email contents and attachment are saved to the SD card, therefore other Androi...

PT-2014-2822

Name of the Vulnerable Software and Affected Versions QEMU versions prior to 1.7.2 Description The issue allows remote attackers to execute arbitrary code via a crafted arglen value in a savevm image. This is related to the ssi sd transfer function in hw/sd/ssi-sd.c. Recommendations For versions...