OSVDB ID: 85308 Title: Mobclix Ad Library for Android com.mobclix.android.sdk.MobclixJavascriptInterface Location Change Remote Disclosure |
Info |
|
|
Dates |
||||
|
|
Description |
Mobclix Ad Library for Android contains a flaw that may lead to an unauthorized information disclosure. The issue is triggered when the com.mobclix.android.sdk.MobclixJavascriptInterface class is called once the application is installed and subsequently whenever the user moves to a different location. This will disclose a user's location to a third party advertiser. |
Classification |
Location:
Remote / Network Access,
Mobile Phone / Hand-held Device
Attack Type: Information Disclosure Impact: Loss of Confidentiality Solution: Workaround Exploit: Exploit Public Disclosure: Uncoordinated Disclosure |
Solution |
The presence of this software means the host system has been compromised through some other exploit/vulnerability. The only way to ensure the software, and any other malicious software (malware), is completely removed is to re-install the operating system. |
Products |
|
References |
|
Credit |
Unknown or Incomplete |