- 漏洞信息

103143
Android File Manager for Android (com.smartwho.SmartFileManager) Local Path Traversal File Access
Local Access Required, Mobile Phone / Hand-held Device Input Manipulation
Loss of Confidentiality Solution Unknown
Exploit Public Uncoordinated Disclosure

- 漏洞描述

Android File Manager for Android (com.smartwho.SmartFileManager) contains a flaw that allows traversing outside of a restricted path. The issue is due to the program not properly sanitizing user input, specifically path traversal style attacks (e.g. '../'). With a specially crafted request, a local attacker can gain access to arbitrary files.

- 时间线

2014-02-09 Unknow
2014-02-09 Unknow

- 解决方案

We are not currently aware of a solution for this vulnerability.

- 相关参考

- 漏洞作者

Unknown or Incomplete
 

 

关于SCAP中文社区

SCAP中文社区是国内第一个以SCAP为主题的中文开放社区。了解更多信息,请查阅[关于本站]

版权声明

CVE/CWE/OVAL均为MITRE公司的注册商标,它们的官方数据源均保存在MITRE公司的相关网站