Code injection

2020-02-1220:15:00

PRIOn knowledge base

www.prio-n.com

6.7 Medium

AI Score

Confidence

Low

0.001 Low

EPSS

Percentile

19.5%

The Bluetooth stack in Android before 2.3.6 allows a physically proximate attacker to obtain contact information via an AT phonebook transfer.

CPENameOperatorVersion
androidlt2.3.6

CPE	Name	Operator	Version
	android	lt	2.3.6

References

code.google.com/p/android/issues/detail?id=21347

deepsec.net/docs/Slides/2013/DeepSec_2013_Jaime_Sanchez_-_Building_The_First_Android_IDS_On_Network_Level.pdf