Thread: Google Android Lets Remote Users Obtain SD Card Contents

Tweet

For all Android luvers heres one xploit to test.

A remote user can obtain the contents of the SD card.

A remote user can create specially crafted HTML that, when loaded by the target user, will download a file to the target user's device and automatically execute the file in the local context to gain read access to files on the SD card.



Source:

HTML Code:

http://thomascannon.net/blog/2010/11/android-data-stealing-vulnerability