CVE-2014-8610 in Android
요약 (영어)
AndroidManifest.xml in Android before 5.0.0 does not require the SEND_SMS permission for the SmsReceiver receiver, which allows attackers to send stored SMS messages, and consequently transmit arbitrary new draft SMS messages or trigger additional per-message charges from a network operator for old messages, via a crafted application that broadcasts an intent with the com.android.mms.transaction.MESSAGE_SENT action, aka Bug 17671795.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.
예약하다
2014. 11. 04.
공개
2014. 12. 15.
상태
확인됨
엔트리
VulDB provides additional information and datapoints for this CVE:
| 아이디 | 취약성 | CWE | 악용 | 대책 | CVE |
|---|---|---|---|---|---|
| 68302 | Google Android handleSmsSent 권한 상승 | 264 | 개념 증명 | 공식 수정 | CVE-2014-8610 |