Overview
TrustGo Antivirus & Mobile Security versions 1.2.7 through 1.3.5 contain a denial-of-service (CWE-20) vulnerability.
Description
CWE-20: Improper Input Validation - CVE-2013-3580 TrustGo Antivirus & Mobile Security versions 1.2.7 through 1.3.5 crash if an intent is sent to com.trustgo.mobile.security.USSDScannerActivity with no arguments. |
Impact
A malicious application installed on the phone may be able to disable the TrustGo Antivirus & Mobile Security software. |
Solution
Apply an Update |
Vendor Information
709806
CVSS Metrics
| Group | Score | Vector |
|---|---|---|
| Base | 3.8 | AV:L/AC:H/Au:S/C:N/I:N/A:C |
| Temporal | 3 | E:POC/RL:OF/RC:ND |
| Environmental | 2.3 | CDP:ND/TD:M/CR:ND/IR:ND/AR:ND |
References
Acknowledgements
Thanks to china.x.orion for reporting this vulnerability.
This document was written by Adam Rauf.
Other Information
| CVE IDs: | CVE-2013-3580 |
| Date Public: | 2013-07-26 |
| Date First Published: | 2013-07-26 |
| Date Last Updated: | 2013-07-29 13:15 UTC |
| Document Revision: | 26 |