Unscored CVE-2012-5182 EUVD-2012-5105GHSA-7rm3-86f4-4mvx

The Loctouch application 3.4.6 and earlier for Android does not properly handle implicit intents, which allows attackers to obtain sensitiv…

Published Dec 26, 2012 · Updated Sep 17, 2024 · Assigned by jpcert

Description

The Loctouch application 3.4.6 and earlier for Android does not properly handle implicit intents, which allows attackers to obtain sensitive information about logged locations via a crafted application.

References

https://play.google.com/store/apps/details?id=com.livedoor.android.folkat
JVN#42625179 third-party-advisory
JVNDB-2012-000114 third-party-advisory