CVE - CVE-2011-0680

CVE-ID
CVE-2011-0680	Learn more at National Vulnerability Database (NVD) • CVSS Severity Rating • Fix Information • Vulnerable Software Versions • SCAP Mappings • CPE Information
Description
data/WorkingMessage.java in the Mms application in Android before 2.2.2 and 2.3.x before 2.3.2 does not properly manage the draft cache, which allows remote attackers to read SMS messages intended for other recipients in opportunistic circumstances via a standard text messaging service.
References
Note: References are provided for the convenience of the reader to help distinguish between vulnerabilities. The list is not intended to be complete.
BID:46105 URL:http://www.securityfocus.com/bid/46105 CONFIRM:http://android.git.kernel.org/?p=platform/packages/apps/Mms.git;a=commit;h=18d6b7e9d2e538fb3c0264332b96c02abf367267 CONFIRM:http://code.google.com/p/android/issues/detail?id=9392#c1460 CONFIRM:http://code.google.com/p/android/issues/detail?id=9392#c1620 MISC:http://android.git.kernel.org/?p=platform/packages/apps/Mms.git;a=commit;h=4d26623ce82230e8e7009adb921c5edea370a9e0 MISC:http://phandroid.com/2011/01/21/android-2-3-2-update-pushing-to-nexus-s-phone-fixes-sms-bug/ MISC:http://twitter.com/GalaxySsupport/statuses/28078194607263744 MISC:http://www.engadget.com/2011/01/22/nexus-one-gets-tiny-update-to-android-2-2-2-probably-fixes-sms/ MISC:http://www.htcphones.net/nexus-one-update-to-android-2-2-2/ MISC:http://www.samsunghub.com/2011/01/22/nexus-s-gets-android-2-3-2-fixes-sms-bug/ MISC:http://www.theinquirer.net/inquirer/news/1939386/google-updates-nexus-android-222 XF:android-workingmessage-info-disclosure(65125) URL:https://exchange.xforce.ibmcloud.com/vulnerabilities/65125
Assigning CNA
MITRE Corporation
Date Record Created
20110131	Disclaimer: The record creation date may reflect when the CVE ID was allocated or reserved, and does not necessarily indicate when this vulnerability was discovered, shared with the affected vendor, publicly disclosed, or updated in CVE.
Phase (Legacy)
Assigned (20110131)
Votes (Legacy)

Comments (Legacy)

Proposed (Legacy)
N/A
This is an record on the CVE List, which provides common identifiers for publicly known cybersecurity vulnerabilities.
Search CVE Using Keywords: You can also search by reference using the CVE Reference Maps.
For More Information: CVE Request Web Form (select "Other" from dropdown)