CVE-2012-2217

Published: May 1, 2012Modified: Apr 29, 2026

6.4

Vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Exploitability: 10.0 / Impact: 4.9

Source: NVD

Description

The HTC IQRD service for Android on the HTC EVO 4G before 4.67.651.3, EVO Design 4G before 2.12.651.5, Shift 4G before 2.77.651.3, EVO 3D before 2.17.651.5, EVO View 4G before 2.23.651.1, Vivid before 3.26.502.56, and Hero does not restrict localhost access to TCP port 2479, which allows remote attackers to (1) send SMS messages, (2) obtain the Network Access Identifier (NAI) and its password, or trigger (3) popup messages or (4) tones via a crafted application that leverages the android.permission.INTERNET permission.

Affected (39)

Products: Htc: Evo 4g Software, Evo 4g, Evo Design 4g Software, Evo Design 4g, Shift 4g Software, Shift 4g, Evo 3d Software, Evo 3d, Evo View 4g Software, Evo View 4g, Vivid Software, Vivid, Hero Software, Hero

Htc

14 products

Evo 4g Software

Evo 4g

Evo Design 4g Software

Configuration A

13 vulnerable

Vulnerable Software	Affected Versions
Htc Evo 4g Software	Up to 4.54.651.1
Htc Evo 4g Software	Version 1.32.651.1
Htc Evo 4g Software	Version 1.47.651.1
Htc Evo 4g Software	Version 3.26.651.6
Htc Evo 4g Software	Version 3.29.651.5
Htc Evo 4g Software	Version 3.30.651.2
Htc Evo 4g Software	Version 3.30.651.3
Htc Evo 4g Software	Version 3.70.651.1
Htc Evo 4g Software	Version 4.22.651.2
Htc Evo 4g Software	Version 4.24.651.1
Htc Evo 4g Software	Version 4.53.651.1
Htc Evo 4g	All versions
Htc Evo 4g	Version gri40

Configuration B

3 vulnerable

Vulnerable Software	Affected Versions
Htc Evo Design 4g Software	Up to 1.19.651.1
Htc Evo Design 4g Software	Version 1.19.651.0
Htc Evo Design 4g	All versions

Configuration C

5 vulnerable

Vulnerable Software	Affected Versions
Htc Shift 4g Software	Up to 2.76.651.6
Htc Shift 4g Software	Version 1.17.651.1
Htc Shift 4g Software	Version 2.75.651.4
Htc Shift 4g Software	Version 2.75.651.5
Htc Shift 4g	All versions

Configuration D

6 vulnerable

Vulnerable Software	Affected Versions
Htc Evo 3d Software	Up to 2.08.651.3
Htc Evo 3d Software	Version 1.11.651.3
Htc Evo 3d Software	Version 1.13.651.7
Htc Evo 3d Software	Version 2.08.651.2
Htc Evo 3d	All versions
Htc Evo 3d	Version gri40

Configuration E

3 vulnerable

Vulnerable Software	Affected Versions
Htc Evo View 4g Software	Up to 1.22.651.2
Htc Evo View 4g Software	Version 1.22.651.1
Htc Evo View 4g	All versions

Configuration F

2 vulnerable

Vulnerable Software	Affected Versions
Htc Vivid Software	Up to 3.26.502
Htc Vivid	All versions

Configuration G

7 vulnerable

Vulnerable Software	Affected Versions
Htc Hero Software	Version 1.29.651.1
Htc Hero Software	Version 1.56.651.2
Htc Hero Software	Version 2.27.651.5
Htc Hero Software	Version 2.27.651.6
Htc Hero Software	Version 2.31.651.7
Htc Hero Software	Version 2.32.651.2
Htc Hero	All versions