Description
A certain HTC update for Android 2.3.4 build GRJ22, when the Sense interface is used on the HTC EVO 3D, EVO 4G, ThunderBolt, and unspecified other devices, provides the HtcLoggers.apk application, which allows user-assisted remote attackers to obtain a list of telephone numbers from a log, and other sensitive information, by leveraging the android.permission.INTERNET application permission and establishing TCP sessions to 127.0.0.1 on port 65511 and a second port.
References (5)
Core 5
Core References
Third Party Advisory, VDB Entry vdb-entry
x_refsource_bid
http://www.securityfocus.com/bid/49916
Third Party Advisory, VDB Entry vdb-entry
x_refsource_xf
https://exchange.xforce.ibmcloud.com/vulnerabilities/70270
Various Sources x_refsource_misc
http://news.cnet.com/8301-1035_3-20114556-94/
Various Sources x_refsource_misc
http://www.thetechherald.com/article.php/201140/7676/HTC-looking-into-vulnerability-reports
Scores
EPSS
0.0103
EPSS Percentile
59.8%
Details
CWE
CWE-200
Status
published
Products (4)
google/android
2.3.4
htc/evo_3d
htc/evo_4g
htc/thunderbolt
Published
Oct 03, 2011
Tracked Since
Feb 18, 2026