CVE-2011-3975 Information disclosure in n/a
A malicious app can access sensitive phone number logs via a local TCP port in HTC's logging application, requiring user interaction to install the malicious app.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2011-3975?
CVE-2011-3975 is a low-severity vulnerability in Google Android, published on 3 Oct 2011. It can only be exploited from the same machine or local network, and only if a user opens a file or follows a link.
Official description
A certain HTC update for Android 2.3.4 build GRJ22, when the Sense interface is used on the HTC EVO 3D, EVO 4G, ThunderBolt, and unspecified other devices, provides the HtcLoggers.apk application, which allows user-assisted remote attackers to obtain a list of telephone numbers from a log, and other sensitive information, by leveraging the android.permission.INTERNET application permission and establishing TCP sessions to 127.0.0.1 on port 65511 and a second port.
Weakness: CWE-200
Which versions are affected by CVE-2011-3975?
It affects 4 products.
Products include Google Android, Htc Evo 3d, Htc Evo 4g, Htc Thunderbolt.
How do I fix CVE-2011-3975?
No fix has been published for CVE-2011-3975 yet. Limit exposure of the affected software until one is available.
Is CVE-2011-3975 being exploited?
There is no known exploitation of CVE-2011-3975 in the wild and no public exploit code.
Other vulnerabilities in Google Android
Sources
Also known as GHSA-pp8x-xmmj-hg66.