The HTC IQRD service for Android on the HTC EVO 4G before 4.67.651.3, EVO Design 4G before 2.12.651.5, Shift 4G before 2.77.651.3, EVO 3D before 2.17.651.5, EVO View 4G before 2.23.651.1, Vivid before 3.26.502.56, and Hero does not restrict localhost access to TCP port 2479, which allows remote attackers to (1) send SMS messages, (2) obtain the Network Access Identifier (NAI) and its password, or trigger (3) popup messages or (4) tones via a crafted application that leverages the android.permission.INTERNET permission.
References
History
No history.
MITRE Information
Status: PUBLISHED
Assigner: mitre
Published: 2012-05-01T14:00:00
Updated: 2017-12-13T18:57:01
Reserved: 2012-04-10T00:00:00
Link: CVE-2012-2217
JSON object: View
NVD Information
Status : Modified
Published: 2012-05-01T14:55:01.673
Modified: 2017-12-14T02:29:02.433
Link: CVE-2012-2217
JSON object: View
Redhat Information
No data.
CWE