The SecEmailComposer/EmailComposer application in the Samsung S6 Edge before the October 2015 MR uses weak permissions for the com.samsung.android.email.intent.action.QUICK_REPLY_BACKGROUND service action, which might allow remote attackers with knowledge of the local email address to obtain sensitive information via a crafted application that sends a crafted intent.
Published at: December 28, 2017 at 02:29AM
View on website
New vulnerability on the NVD: CVE-2015-7889
Tag: government hack NVD security
No comments: