Code injection

The 360 MobileSafe com.qihoo360.mobilesafe application 2.x before 2.3.0 for Android does not properly protect data, which allows remote attackers to read or modify SMS messages and a contact list via a crafted application...

CVE-2011-4772

CVE-2011-4772 affects the Android app 360 KouXin (com.qihoo360.kouxin) version 1.5.3. The issue is improper data protection that allows remote attackers to read or modify SMS messages and a contact list via a crafted application. Root cause: insufficient protection of sensitive data. Impact: conf...

CVE-2011-4769

The 360 MobileSafe com.qihoo360.mobilesafe application 2.x before 2.3.0 for Android does not properly protect data, which allows remote attackers to read or modify SMS messages and a contact list via a crafted application...

CVE-2011-4773

The affected software is the Android app AnGuanJia (com.anguanjia.safe) version 2.10.343. The vulnerability arises from improper data protection within the app, allowing remote attackers to read or modify SMS messages and the contact list via a crafted application. This CVE has corroborating entr...

CVE-2011-4863

The Tencent QQPimSecure com.tencent.qqpimsecure application 3.0.2 for Android does not properly protect data, which allows remote attackers to read or modify SMS/MMS messages and a contact list via a crafted application...

CVE-2011-4772

The 360 KouXin com.qihoo360.kouxin application 1.5.3 for Android does not properly protect data, which allows remote attackers to read or modify SMS messages and a contact list via a crafted application...

CVE-2011-4698

The AndroidAppTools Easy Filter com.phoneblocker.android application 1.1 and 1.2 for Android does not properly protect data, which allows remote attackers to read or modify SMS messages and call records via a crafted application...

CVE-2011-4773

The AnGuanJia com.anguanjia.safe application 2.10.343 for Android does not properly protect data, which allows remote attackers to read or modify SMS messages and a contact list via a crafted application...

CVE-2011-4704

The CVE-2011-4704 entry concerns the Voxofon Android app (package com.voxofon) prior to version 2.5.2. According to the provided documents, the vulnerability arises because the application does not properly protect data, enabling remote attackers to read or modify SMS information via a crafted ap...

CVE-2011-4704

The Voxofon com.voxofon application before 2.5.2 for Android does not properly protect data, which allows remote attackers to read or modify SMS information via a crafted application...

CVE-2011-4863

The CVE concerns Tencent QQPimSecure (com.tencent.qqpimsecure) on Android, version 3.0.2. The flaw is a data protection weakness that allows remote attackers to read or modify SMS/MMS messages and the contact list via a crafted application. The vulnerability is described without exploit specifics...

CVE-2011-4698

The CVE-2011-4698 entry concerns the AndroidAppTools Easy Filter (com.phoneblocker.android) app versions 1.1 and 1.2 on Android. The described issue is improper data protection that enables a remote attacker to read or modify SMS messages and call records via a crafted application. No remediation...

Fake Angry Birds Game spreading Malware from Android Market

Fake Angry Birds Game spreading Malware from Android Market From last week premium rate SMS Trojans surfaced in the Android Market. Google has pulled 22 apps that are masquerading as legitimate versions of popular games like Angry Birds and Cut the Rope. Security researchers have discovered a way...

Microsoft Windows Phone 7.5消息处理拒绝服务漏洞

Bugtraq ID: 51179 Microsoft Windows Phone是一款智能手机设备，基于移动windows操作系统 Microsoft Windows Phone处理消息存在错误，攻击者可以构建特制文本消息通过SMS, Facebook chat或Windows Live发送，使目标用户设备重启或处理消息相关的功能不能使用 0 Microsoft Windows Phone 7.5 厂商解决方案 目前没有详细解决方案提供： http://www.microsoft.com/windowsmobile/default.mspx...

Best Free Android Security Software Avast Antivirus

Best Free Android Security Software Avast Antivirus For you who longing for free Android antivirus, this is an exciting THN news for you. Avast, one of the famous antivirus vendors, now has launched Android Antivirus you can use for free! This Antivirus mobile is named Avast Mobile Security. Avas...

Windows Phone 7.5 Denial of Service Attack Vulnerability (Video Demonstration)

Denial of Service Attack Vulnerability in Windows Phone 7.5 Microsoft's range of Windows Phones suffer from a denial-of-service attack bug that allows attackers to reboot the device and disable the messaging functionality on a device. A malicious SMS sent to a Windows Phone 7.5 device will force ...

Windows Phone 7.5 Denial of Service Attack Vulnerability (Video Demonstration)

Denial of Service Attack Vulnerability in Windows Phone 7.5 Microsoft's range of Windows Phones suffer from a denial-of-service attack bug that allows attackers to reboot the device and disable the messaging functionality on a device. A malicious SMS sent to a Windows Phone 7.5 device will force ...

Carrier IQ Says Bug Can Cause Some SMS to Be Recorded in Coded Form

Carrier IQ, the embattled software company at the center of the controversy over alleged data collection on mobile devices, has released a new document that details the ways in which carriers deploy the software, how it works on devices and what data it is capable of collecting. The company also...

More Apps Pulled From Android Market Over Hidden SMS Functionality

There has been another round of malicious apps discovered in the official Android Market, with this wave containing hidden functionality to send SMS messages to premium-rate numbers. The apps, which Google has pulled from the Market already, are counterfeit versions of popular games, including...

SMS Trojans Spreading to the Rest of the World

SMS Trojans that ride along on supposedly benign mobile apps and then send out messages to high-priced numbers have been a problem in some Asian and Eastern European countries for several years now, most notably in Russia and China. But now the attackers have realized that there’s a whole big wor...