Google Android on Verizon Droid Lets Physically Local Users Bypass the Screen Lock
|
|
SecurityTracker Alert ID: 1023430 |
|
SecurityTracker URL: http://securitytracker.com/id/1023430
|
|
CVE Reference:
GENERIC-MAP-NOMATCH
(Links to External Site)
|
Date: Jan 11 2010
|
Impact:
User access via local system
|
Vendor Confirmed: Yes
|
Version(s): 2.0.1
|
Description:
A vulnerability was reported in Google Android running on Verizon Droid. A physically local user can bypass the screen lock in certain cases.
When an incoming call is received on a device that has the unlock pattern feature enabled, a physically local user can select the 'Back' icon to access the 'Home' screen without having to enter the unlock pattern.
Verizon Droid phones are affected.
The Assurer reported this vulnerability.
The original advisory is available at:
https://theassurer.com/p/756.html
|
Impact:
A physically local user can bypass the screen lock in certain cases.
|
Solution:
No solution was available at the time of this entry.
|
Vendor URL: www.google.com/ (Links to External Site)
|
Cause:
Access control error
|
Underlying OS:
|
|
Message History:
None.
|
Source Message Contents
|
Date: Mon, 11 Jan 2010 21:28:46 +0000
Subject: Google Android
|
https://theassurer.com/p/756.html
|
|