Researchers from the Leviathan security group have found that even Android software that does not have access to any permissions can access the user's profile without permission. Such data as photos, backup files, and external profiles stored on the SD card of the mobile phone may be accessed by no authorized software at all. "The contents of the documents are likely to be accessed, and it is unclear who will see them," said researcher Paul Broder. Broder also says that the/data/system/packages.list file allows you to view applications that are installed in your phone store and access files that belong to other applications. This feature can be used to find applications that have low privilege vulnerabilities. This vulnerability was tested in the Android 4.0.3 and Android 2.3.5 systems.
The content source of this page is from Internet, which doesn't represent Alibaba Cloud's opinion;
products and services mentioned on that page don't have any relationship with Alibaba Cloud. If the
content of the page makes you feel confusing, please write us an email, we will handle the problem
within 5 days after receiving your email.
If you find any instances of plagiarism from the community, please send an email to:
info-contact@alibabacloud.com
and provide relevant evidence. A staff member will contact you within 5 working days.
