The SAND STUDIO AirDroid application 1.1.0 and earlier for Android mishandles implicit intents, which allows attackers to obtain sensitive information via a crafted application.
The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.
Link | Tags |
---|---|
http://jvn.jp/en/jp/JVN37825153/index.html | third party advisory vendor advisory |
http://jvndb.jvn.jp/jvndb/JVNDB-2015-000162 | third party advisory vendor advisory |