CVE-2013-6272 | BDVDB-2026-100286 Detail

Description#

The NotificationBroadcastReceiver class in the com.android.phone process in Google Android 4.1.1 through 4.4.2 allows attackers to bypass intended access restrictions and consequently make phone calls to arbitrary numbers, send mmi or ussd codes, or hangup ongoing calls via a crafted application.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

http://seclists.org/fulldisclosure/2014/Jul/13
https://exchange.xforce.ibmcloud.com/vulnerabilities/94423
http://packetstormsecurity.com/files/127359/Android-OS-Authorization-Missing.html
https://curesec.com/blog/article/blog/35.html
http://www.securityfocus.com/bid/68415

Exploit#

No public exploit known

History#

Version 12018-05-02Record published in the CVE List.
Version 22024-08-06Most recent update recorded in the CVE List.