Samsung Galaxy S3/S4 exposes an unprotected component allowing an unprivileged app to send arbitrary SMS texts to arbitrary destinations without permission.
During installation, installed file permissions are set to allow anyone to modify those files.
Link | Tags |
---|---|
http://shouji.360.cn/securityReportlist/CVE-2013-4764.html | third party advisory |
https://seclists.org/bugtraq/2013/Jul/107 | third party advisory mailing list |