AVG AntiVirus for Android "Anti-theft" service Spoofing Vulnerability

Release date:
Updated on:

Affected Systems:
AVG AntiVirus for Android
Description:
--------------------------------------------------------------------------------
Bugtraq id: 57129
CVE (CAN) ID: CVE-2012-6335
 
AVG AntiVirus for Android is an anti-virus and anti-backdoor program used on smartphones.
 
The Anti-theft service of AVG AntiVirus for Android has a security vulnerability that allows local attackers to obtain the user's GPS location information through the general gps location spoofing program.
 
<* Source: Jiten Jain

Link: http://web.nvd.nist.gov/view/vuln/detail? VulnId = CVE-2012-6335
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:
 
AVG
---
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:
 
Http://www.grisoft.com/us/us_index.php