CVE-2012-2980
High
Description
The Samsung and HTC onTouchEvent method implementation for Android on the T-Mobile myTouch 3G Slide, HTC Merge, Sprint EVO Shift 4G, HTC ChaCha, AT&T Status, HTC Desire Z, T-Mobile G2, T-Mobile myTouch 4G Slide, and Samsung Galaxy S stores touch coordinates in the dmesg buffer, which allows remote attackers to obtain sensitive information via a crafted application, as demonstrated by PIN numbers, telephone numbers, and text messages.
SeverityHigh
CVSS7.1
Exploit probability—
Product
Att Status
PublishedAug 21, 2012
First seenAug 21, 2012
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| att status | No range specified | — |
| htc chacha | No range specified | — |
| htc desire | No range specified | — |
| htc merge | No range specified | — |
| samsung galaxy_s | No range specified | — |
| sprint evo_shift_4g | No range specified | — |
| t-mobile g2 | No range specified | — |
| t-mobile mytouch_3g_slide | No range specified | — |
| t-mobile mytouch_4g_slide | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.