high7.1
CVE-2012-2980
The Samsung and HTC onTouchEvent method implementation for Android on the T-Mobile myTouch 3G Slide, HTC Merge, Sprint EVO Shift 4G, HTC ChaCha, AT&T Status, H…
Impact
The Samsung and HTC onTouchEvent method implementation for Android on the T-Mobile myTouch 3G Slide, HTC Merge, Sprint EVO Shift 4G, HTC ChaCha, AT&T Status, HTC Desire Z, T-Mobile G2, T-Mobile myTouch 4G Slide, and Samsung Galaxy S stores touch coordinates in the dmesg buffer, which allows remote attackers to obtain sensitive information via a crafted application, as demonstrated by PIN numbers, telephone numbers, and text messages.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Att | Status | All versions |
| Htc | Chacha | All versions |
| Htc | Desire | All versions |
| Htc | Merge | All versions |
| Samsung | Galaxy S | All versions |
| Sprint | Evo Shift 4g | All versions |
| T-Mobile | G2 | All versions |
| T-Mobile | Mytouch 3g Slide | All versions |
| T-Mobile | Mytouch 4g Slide | All versions |