medium5.3
CVE-2014-8889
Dropbox SDK for Android before 1.6.2 might allow remote attackers to obtain sensitive information via crafted malware or via a drive-by download attack.
Impact
Dropbox SDK for Android before 1.6.2 might allow remote attackers to obtain sensitive information via crafted malware or via a drive-by download attack.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Dropbox | Dropbox Sdk | Versions 1.5.4, 1.6.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/130767/Dropbox-SDK-For-Android-Remote-Exploitation.html
- http://seclists.org/fulldisclosure/2015/Mar/61
- http://www.securityfocus.com/archive/1/534843/100/1500/threaded
- http://www.securityfocus.com/bid/73035
- https://securityintelligence.com/droppedin-remotely-exploitable-vulnerability-in-the-dropbox-sdk-for-android/
- http://packetstormsecurity.com/files/130767/Dropbox-SDK-For-Android-Remote-Exploitation.html
- http://seclists.org/fulldisclosure/2015/Mar/61
- http://www.securityfocus.com/archive/1/534843/100/1500/threaded
- http://www.securityfocus.com/bid/73035
- https://securityintelligence.com/droppedin-remotely-exploitable-vulnerability-in-the-dropbox-sdk-for-android/