PDA

View Full Version : Google Android Lets Remote Users Obtain SD Card Contents



AnArKI
11-26-2010, 05:24 PM
For all Android luvers heres one xploit to test.

A remote user can obtain the contents of the SD card.

A remote user can create specially crafted HTML that, when loaded by the target user, will download a file to the target user's device and automatically execute the file in the local context to gain read access to files on the SD card.


http://vimeo.com/17030639

Source:
http://thomascannon.net/blog/2010/11/android-data-stealing-vulnerability

fb1h2s
11-27-2010, 11:34 AM
Omg great one :)

sh0bhit
11-27-2010, 03:09 PM
gonna try it on my phone..thanks for sharing