CVE-2014-8610

AndroidManifest.xml in Android before 5.0.0 does not require the SEND_SMS permission for the SmsReceiver receiver, which allows attackers to send stored SMS…

published December 15, 2014

CVSS
—
EPSS
0%
Percentile
26.3
In the wild
Unconfirmed
What it is

AndroidManifest.xml in Android before 5.0.0 does not require the SEND_SMS permission for the SmsReceiver receiver, which allows attackers to send stored SMS messages, and consequently transmit arbitrary new draft SMS messages or trigger additional per-message charges from a network operator for old messages, via a crafted application that broadcasts an intent with the com.android.mms.transaction.MESSAGE_SENT action, aka Bug 17671795.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00342 · 26.3th percentile
Published
2014-12-15T17:27Z
EPSS history
Timeline
  • 15 DEC 17:27Z
    AndroidManifest.xml in Android before 5.0.0 does not require the SEND_SMS permission for the SmsReceiver receiver, which allows attackers to send stored SMS…
    cvelistv5