Google Android APK Application Installation Spoofing Weakness
Mobile Phone / Hand-held Device
Loss of Integrity
Google Android contains a flaw that may allow a context-dependent attacker to spoof a valid application that is installed via an APK file. This may allow the attacker to trick a user in to installing an application that appears valid but is in fact malicious.
OSVDB is not currently aware of a solution for this vulnerability.