OSVDB ID: 86083 Title: Samsung Galaxy S3 Near Field Communication (NFC) Memory Corruption |
Info |
|
|
Dates |
||||
|
|
Description |
Samsung Galaxy S2 and Galaxy S3 phones contain a flaw in the Near Field Communication (NFC) functionality. When a malicious user's phone is within close proximity, almost touching the victim's phone, a crafted application can push a second malicious application to the other device. While this functionality is designed to share images, the Galaxy phones will take executables as well. Once the malicious application is pushed, it will be executed immediately without user interaction. This will grant the attacker user level privileges. |
Classification |
Location:
Physical Access Required,
Mobile Phone / Hand-held Device
Attack Type: Input Manipulation Impact: Loss of Integrity Solution: Solution Unknown Exploit: Exploit Private Disclosure: Uncoordinated Disclosure |
Solution |
OSVDB is not aware of a solution for this vulnerability. |
Products |
|
Credit |
Unknown or Incomplete |