Overview
Lookout Mobile Security version 8.14.1-7fe5f1, and possibly earlier versions, contains a denial-of-service vulnerability.
Description
Lookout Mobile Security (version 8.14.1-7fe5f1) crashes if an intent is sent to com.lookout.security.ScanTell with no arguments. |
Impact
A malicious application installed on the phone may be able to disable the Lookout Mobile Security software. |
Solution
Apply an Update Lookout Mobile Security version 8.17-8a39d3f has been released to address this vulnerability. |
Vendor Information
704828
CVSS Metrics
| Group | Score | Vector |
|---|---|---|
| Base | 3.8 | AV:L/AC:H/Au:S/C:N/I:N/A:C |
| Temporal | 3 | E:POC/RL:OF/RC:C |
| Environmental | 2.3 | CDP:ND/TD:M/CR:ND/IR:ND/AR:ND |
References
Acknowledgements
Thanks to china.x.orion for reporting this vulnerability.
This document was written by Adam Rauf.
Other Information
| CVE IDs: | CVE-2013-3579 |
| Date Public: | 2013-06-27 |
| Date First Published: | 2013-06-27 |
| Date Last Updated: | 2013-07-03 13:41 UTC |
| Document Revision: | 15 |