Multiple insecure temporary file creation vulnerabilities in Samsung Galaxy S2 Epic 4G Touch

Release date:
Updated on:

Affected Systems:
Samsung Galaxy S2 Epic 4G Touch
Description:
--------------------------------------------------------------------------------
Bugtraq id: 55053

Samsung Galaxy S2 Epic 4G Touch is an Android mobile phone.

Samsung Galaxy S2 Epic 4G Touch has multiple insecure temporary file creation vulnerabilities. After successful exploitation, attackers can overwrite arbitrary files and execute symbolic link attacks on affected devices.

<* Source: Alexander Pruss
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Samsung
-------
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:

Http://www.samsung.com/