CVE-2011-4867

Published: Jan 25, 2012Modified: Apr 29, 2026

5.8

Vector

AV:N/AC:M/Au:N/C:P/I:P/A:N

Exploitability: 8.6 / Impact: 4.9

Source: NVD

Description

The Tencent QQPhoto (com.tencent.qqphoto) application 0.97 for Android does not properly protect data, which allows remote attackers to read or modify contact information and a password hash via a crafted application.

Affected (1)

Products: Tencent: Qqpphoto

Tencent

1 product

Qqpphoto

Configuration A

1 vulnerable · 1 platform

Vulnerable Software	Affected Versions
Tencent Qqpphoto	Version 0.97

Running on/with	Platform Versions
Android Android	All versions

Related CWEs

CWE-264

References (2)

http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2011-4867-vulnerability-in-QQPhoto.html

Source: cve@mitre.org

http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2011-4867-vulnerability-in-QQPhoto.html

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.