Release date:
Updated on: 2013-04-23
Affected Systems:
Avast Mobile Security for Android
Description:
--------------------------------------------------------------------------------
Bugtraq id: 59318
CVE (CAN) ID: CVE-2012-6335
Avast! Mobile Security for Android is a Mobile anti-virus and Mobile tracking application.
Avast! Mobile Security for Android 2.0.3587 and earlier versions of the Anti-theft service have the local denial of service vulnerability, local attackers with close physical locations can exploit this vulnerability to provide arbitrary location data through a common simple GPS location spoofing program, which can also cause application crash.
<* Source: Kurt Traver
Link: http://thehackernews.com/2012/12/manufacture-based-gps-tracking-services.html
*>
Suggestion:
--------------------------------------------------------------------------------
Vendor patch:
Avast
-----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:
Www.avast.com/free-mobile-security