Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-89r5-96wf-852f

Опубликовано: 07 янв. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 7.7

Описание

The com.windymob.callscreen.ringtone.callcolor.colorphone (aka Color Phone Call Screen Themes) application through 1.1.2 for Android enables any application (with no permissions) to place phone calls without user interaction by sending a crafted intent via the com.frovis.androidbase.call.DialerActivity component.

The com.windymob.callscreen.ringtone.callcolor.colorphone (aka Color Phone Call Screen Themes) application through 1.1.2 for Android enables any application (with no permissions) to place phone calls without user interaction by sending a crafted intent via the com.frovis.androidbase.call.DialerActivity component.

EPSS

Процентиль: 9%
0.00033
Низкий

7.7 High

CVSS3

Дефекты

CWE-281

Связанные уязвимости

CVSS3: 7.7
nvd
около 1 года назад

The com.windymob.callscreen.ringtone.callcolor.colorphone (aka Color Phone Call Screen Themes) application through 1.1.2 for Android enables any application (with no permissions) to place phone calls without user interaction by sending a crafted intent via the com.frovis.androidbase.call.DialerActivity component.

EPSS

Процентиль: 9%
0.00033
Низкий

7.7 High

CVSS3

Дефекты

CWE-281