Samsung Galaxy S3/S4 exposes an unprotected component allowing arbitrary SMS text messages without requesting permission.
During installation, installed file permissions are set to allow anyone to modify those files.
Link | Tags |
---|---|
http://archives.neohapsis.com/archives/bugtraq/2013-07/0108.html | third party advisory broken link |
https://www.securityfocus.com/bid/61280 | vdb entry third party advisory broken link |