CVE-2013-6272
N/A
N/A
Summary
The NotificationBroadcastReceiver class in the com.android.phone process in Google Android 4.1.1 through 4.4.2 allows attackers to bypass intended access restrictions and consequently make phone calls to arbitrary numbers, send mmi or ussd codes, or hangup ongoing calls via a crafted application.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| n/a | n/a | n/a | affected |
Weaknesses
- n/a
ADP Enrichment
CVE Program Container
Additional References
- http://seclists.org/fulldisclosure/2014/Jul/13
- https://exchange.xforce.ibmcloud.com/vulnerabilities/94423
- http://packetstormsecurity.com/files/127359/Android-OS-Authorization-Missing.html
- https://curesec.com/blog/article/blog/35.html
- http://www.securityfocus.com/bid/68415
References
- http://seclists.org/fulldisclosure/2014/Jul/13
- https://exchange.xforce.ibmcloud.com/vulnerabilities/94423
- http://packetstormsecurity.com/files/127359/Android-OS-Authorization-Missing.html
- https://curesec.com/blog/article/blog/35.html
- http://www.securityfocus.com/bid/68415
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.