CVE-2017-12816

In Kaspersky Internet Security for Android 11.12.4.1622, some of application exports activities have weak permissions, which might be used by a malware…

published August 25, 2017

CVSS
—
EPSS
2%
Percentile
74.2
In the wild
Unconfirmed
What it is

⚠️ Weak permissions in Kaspersky Internet Security for Android leave the door slightly ajar for malware! Think of it like having a hotel room key that can open multiple rooms instead of just yours — it’s not just embarrassing, it’s downright risky! A malicious app could exploit these weak permissions to gain unauthorized access to sensitive functionalities in Kaspersky, potentially jeopardizing your personal data and device security. This could lead to the malware executing harmful actions without your consent, making your device vulnerable to all sorts of trouble.

Put simply

Think of it like having a hotel room key that can open multiple rooms instead of just yours — it’s not just embarrassing, it’s downright risky! This vulnerability arises from certain application exports having insufficiently restrictive permissions, allowing other applications to interact with Kaspersky's functions via Android IPC (Inter-Process Communication). As a result, malware could leverage these permissions to perform unauthorized tasks.

What to do

A malicious app could exploit these weak permissions to gain unauthorized access to sensitive functionalities in Kaspersky, potentially jeopardizing your personal data and device security. This could lead to the malware executing harmful actions without your consent, making your device vulnerable to all sorts of trouble. To mitigate this risk, ensure you update Kaspersky Internet Security to the latest version where permissions have been tightened. Additionally, regularly review and manage app permissions on your Android device to prevent unauthorized access. You've got this! Stay vigilant and update your apps to keep your device secure! 🛡️

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01505 · 74.2th percentile
Published
2017-08-25T20:00Z
EPSS history
Timeline
  • 25 AUG 20:00Z
    In Kaspersky Internet Security for Android 11.12.4.1622, some of application exports activities have weak permissions, which might be used by a malware…
    cvelistv5