Tencent QQPimSecure remote Illegal Access Vulnerability

Release date:
Updated on:

Affected Systems:
Tencent QQPimSecure 3.0.2
Description:
--------------------------------------------------------------------------------
Bugtraq id: 51687
Cve id: CVE-2011-4863

QQ Mobile Phone Manager is a mobile phone security management tool.

QQPimSecure has a remote Illegal Access Vulnerability. Attackers can exploit this vulnerability to read or modify SMS messages and call records.

<* Source: AppSec

Link: http://www4.comp.polyu.edu.hk /~ Appsec/bugs/CVE-2011-4863-vulnerability-in-QQPimSecure.html
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Tencent
-------
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:

Http://im.qq.com/qq/dlqq.shtml