OSVDB ID: 85304 Title: Sosceo Ad Library for Android com.sosceo.android.ads.AdView Recent Phone Call Number Remote Disclosure |
Info |
|
|
Dates |
||||
|
|
Description |
Sosceo Ad Library for Android contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered by the com.sosceo.android.ads.AdView object querying the device's contact information for the most recent call and then storing it in data objects which are used as URL queries when requesting ads, which will disclose the phone number of the most recent call to a remote attacker. |
Classification |
Location:
Remote / Network Access,
Mobile Phone / Hand-held Device
Attack Type: Information Disclosure Impact: Loss of Confidentiality Solution: Workaround Exploit: Exploit Public Disclosure: Uncoordinated Disclosure |
Solution |
The presence of this software means the host system has been compromised through some other exploit/vulnerability. The only way to ensure the software, and any other malicious software (malware), is completely removed is to re-install the operating system. |
Products |
|
References |
|
Credit |
Unknown or Incomplete |