NVD

Id
10529  
Name
CVE-2011-3975  
Description
A certain HTC update for Android 2.3.4 build GRJ22, when the Sense interface is used on the HTC EVO 3D, EVO 4G, ThunderBolt, and unspecified other devices, provides the HtcLoggers.apk application, which allows user-assisted remote attackers to obtain a list of telephone numbers from a log, and other sensitive information, by leveraging the android.permission.INTERNET application permission and establishing TCP sessions to 127.0.0.1 on port 65511 and a second port.  
Reject
 
CVSS Version
2  
CVSS Score
2.6  
Severity
Low  
CVSS Base Score
2.6  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
4.9  
CVSS Vector
(AV:N/AC:H/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-07  
Published
2011-10-03  
Modified Date
2011-10-20  
Seq
2011-3975  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
59684 10529 CVE-2011-3975 http://news.cnet.com/8301-1035_3-20114556-94/  View
59685 10529 CVE-2011-3975 http://www.androidpolice.com/2011/10/01/massive-security-vulnerability-in-htc-android-devices-evo-3d-4g-thunderbolt-others-exposes-phone-numbers-gps-sms-emails-addresses-much-more/  View
59686 10529 CVE-2011-3975 49916  View
59687 10529 CVE-2011-3975 http://www.thetechherald.com/article.php/201140/7676/HTC-looking-into-vulnerability-reports  View
59688 10529 CVE-2011-3975 htc-htcloggers-info-disclosure(70270)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
32089 JVNDB-2011-002329 複数の Android 用 HTC 製品における電話番号およびその他の重要な情報を取得される脆弱性 複数の Android 用 HTC 製品は、Sense Interface を使用する際、HtcLoggers.apk アプリケーションを供給するため、通話記録から電話番号のリスト、およびその他の重要な情報を取得される脆弱性が存在します。 CVE-2011-3975 51882 CVE-2011-3975 10529 2.6 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-002329.html 2011-10-03 2011-10-07 View