CVE-2012-2980

Published: Aug 21, 2012Modified: Apr 29, 2026

7.1

Vector

AV:N/AC:M/Au:N/C:C/I:N/A:N

Exploitability: 8.6 / Impact: 6.9

Source: NVD

Description

The Samsung and HTC onTouchEvent method implementation for Android on the T-Mobile myTouch 3G Slide, HTC Merge, Sprint EVO Shift 4G, HTC ChaCha, AT&T Status, HTC Desire Z, T-Mobile G2, T-Mobile myTouch 4G Slide, and Samsung Galaxy S stores touch coordinates in the dmesg buffer, which allows remote attackers to obtain sensitive information via a crafted application, as demonstrated by PIN numbers, telephone numbers, and text messages.

Affected (9)

Products: Att: Status · Htc: Chacha, Desire, Merge · Samsung: Galaxy S · +2 more

Show all products

Att: Status · Htc: Chacha, Desire, Merge · Samsung: Galaxy S · Sprint: Evo Shift 4g · T Mobile: G2, Mytouch 3g Slide, Mytouch 4g Slide

1 product

3 products

1 product

1 product

3 products

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Att Status	All versions
Htc Chacha	All versions
Htc Desire	All versions
Htc Merge	All versions
Samsung Galaxy S	All versions
Sprint Evo Shift 4g	All versions
T Mobile G2	All versions
T Mobile Mytouch 3g Slide	All versions
T Mobile Mytouch 4g Slide	All versions