Android Loctouch implicit intents processing information leakage Vulnerability

Release date:
Updated on:

Affected Systems:
Google Loctouch 3.4.6
Google Loctouch
Description:
--------------------------------------------------------------------------------
CVE (CAN) ID: CVE-2012-5182
 
Loctouch is an application provided by NHN Japan to record location information.

Loctouch has an information leakage vulnerability in processing implicit intents. Attackers can exploit this vulnerability by using malicious Android apps to obtain location record information and other sensitive information.
 
<* Source: Gaku Mochizuki

Link: http://jvn.jp/en/jp/JVN42625179/index.html
Http://jvndb.jvn.jp/en/contents/2012/JVNDB-2012-000114.html
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:
 
Google
------
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:
 
Https://play.google.com/store/apps/details? Id = com. livedoor. android. folkat