VDB
CVE-2011-0680
CVE-2011-0680
PUBLISHED
CVSS 5 MEDIUM
data/WorkingMessage.java in the Mms application in Android before 2.2.2 and 2.3.x before 2.3.2 does not properly manage the draft cache, which allows remote attackers to read SMS messages intended for other recipients in opportunistic circumstances via a standard text messaging service.
EPSS 1.84% · 77.9th percentile
Risk Scores
CVSS 2.0
5
EPSS Score
1.84%
77.9th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| android | 0, 1.6, 2.1 | |
| n/a | n/a | n/a |
Timeline
- Jan 31, 2011 CVE Published
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 21, 2022 EPSS Score
- Jul 13, 2022 EPSS Score
- Oct 28, 2022 EPSS Score
- Dec 20, 2022 EPSS Score
- Feb 11, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 5, 2023 EPSS Score
- May 28, 2023 EPSS Score
- Jul 20, 2023 EPSS Score
References
- http://www.htcphones.net/nexus-one-update-to-android-2-2-2/ url
- http://www.samsunghub.com/2011/01/22/nexus-s-gets-android-2-3-2-fixes-sms-bug/ url
- http://code.google.com/p/android/issues/detail?id=9392#c1620 url
- android-workingmessage-info-disclosure(65125) vdb
- http://android.git.kernel.org/?p=platform/packages/apps/Mms.git%3Ba=commit%3Bh=18d6b7e9d2e538fb3c0264332b96c02abf367267 url
- https://nvd.nist.gov/vuln/detail/CVE-2011-0680 advisory
- http://android.git.kernel.org/?p=platform/packages/apps/Mms.git;a=commit;h=18d6b7e9d2e538fb3c0264332b96c02abf367267 url
- http://android.git.kernel.org/?p=platform/packages/apps/Mms.git;a=commit;h=4d26623ce82230e8e7009adb921c5edea370a9e0 url
- http://phandroid.com/2011/01/21/android-2-3-2-update-pushing-to-nexus-s-phone-fixes-sms-bug url
- http://www.engadget.com/2011/01/22/nexus-one-gets-tiny-update-to-android-2-2-2-probably-fixes-sms url
- http://www.htcphones.net/nexus-one-update-to-android-2-2-2 url
- http://www.samsunghub.com/2011/01/22/nexus-s-gets-android-2-3-2-fixes-sms-bug url
- http://android.git.kernel.org/?p=platform/packages/apps/Mms.git%3Ba=commit%3Bh=4d26623ce82230e8e7009adb921c5edea370a9e0 technical
- http://code.google.com/p/android/issues/detail?id=9392#c1460 technical
- http://phandroid.com/2011/01/21/android-2-3-2-update-pushing-to-nexus-s-phone-fixes-sms-bug/ technical
- http://twitter.com/GalaxySsupport/statuses/28078194607263744 technical
- http://www.engadget.com/2011/01/22/nexus-one-gets-tiny-update-to-android-2-2-2-probably-fixes-sms/ technical
- http://www.securityfocus.com/bid/46105 technical
- http://www.theinquirer.net/inquirer/news/1939386/google-updates-nexus-android-222 patch