CVE-2012-2217
First published: Tue May 01 2012(Updated: )
The HTC IQRD service for Android on the HTC EVO 4G before 4.67.651.3, EVO Design 4G before 2.12.651.5, Shift 4G before 2.77.651.3, EVO 3D before 2.17.651.5, EVO View 4G before 2.23.651.1, Vivid before 3.26.502.56, and Hero does not restrict localhost access to TCP port 2479, which allows remote attackers to (1) send SMS messages, (2) obtain the Network Access Identifier (NAI) and its password, or trigger (3) popup messages or (4) tones via a crafted application that leverages the android.permission.INTERNET permission.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| HTC EVO 4G | <=4.54.651.1 | |
| HTC EVO 4G | =1.32.651.1 | |
| HTC EVO 4G | =1.47.651.1 | |
| HTC EVO 4G | =3.26.651.6 | |
| HTC EVO 4G | =3.29.651.5 | |
| HTC EVO 4G | =3.30.651.2 | |
| HTC EVO 4G | =3.30.651.3 | |
| HTC EVO 4G | =3.70.651.1 | |
| HTC EVO 4G | =4.22.651.2 | |
| HTC EVO 4G | =4.24.651.1 | |
| HTC EVO 4G | =4.53.651.1 | |
| HTC EVO 4G | ||
| HTC EVO 4G | =gri40 | |
| HTC Evo Design 4G | <=1.19.651.1 | |
| HTC Evo Design 4G | =1.19.651.0 | |
| HTC Evo Design 4G | ||
| HTC SDK API | <=2.76.651.6 | |
| HTC SDK API | =1.17.651.1 | |
| HTC SDK API | =2.75.651.4 | |
| HTC SDK API | =2.75.651.5 | |
| HTC Shift 4G Software | ||
| HTC EVO 3D | <=2.08.651.3 | |
| HTC EVO 3D | =1.11.651.3 | |
| HTC EVO 3D | =1.13.651.7 | |
| HTC EVO 3D | =2.08.651.2 | |
| HTC EVO 3D | ||
| HTC EVO 3D | =gri40 | |
| HTC EVO View 4G | <=1.22.651.2 | |
| HTC EVO View 4G | =1.22.651.1 | |
| HTC EVO View 4G | ||
| HTC Vivid | <=3.26.502 | |
| Htc Vivid Software | ||
| HTC Hero | =1.29.651.1 | |
| HTC Hero | =1.56.651.2 | |
| HTC Hero | =2.27.651.5 | |
| HTC Hero | =2.27.651.6 | |
| HTC Hero | =2.31.651.7 | |
| HTC Hero | =2.32.651.2 | |
| HTC Hero |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2012-2217?
CVE-2012-2217 has a moderate severity rating due to its potential for unauthorized access to sensitive information.
What devices are affected by CVE-2012-2217?
CVE-2012-2217 affects several HTC devices including the EVO 4G, EVO Design 4G, Shift 4G, EVO 3D, EVO View 4G, Vivid, and Hero, particularly versions prior to specified updates.
How do I fix CVE-2012-2217?
To fix CVE-2012-2217, update the affected HTC device software to the latest version as specified by HTC.
What type of vulnerability is CVE-2012-2217?
CVE-2012-2217 is a security vulnerability that involves inadequate restrictions on localhost access to a network service.
Can CVE-2012-2217 be exploited remotely?
Yes, CVE-2012-2217 can be exploited remotely due to the lack of access restrictions, allowing attackers to potentially gain unauthorized access.
- agent/references
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/author
- agent/last-modified-date
- agent/weakness
- agent/description
- agent/first-publish-date
- agent/event
- agent/source
- agent/tags
- agent/softwarecombine
- collector/nvd-index
- agent/software-canonical-lookup-request
- vendor/htc
- canonical/htc evo 4g
- version/htc evo 4g/4.54.651.1
- version/htc evo 4g/1.32.651.1
- version/htc evo 4g/1.47.651.1
- version/htc evo 4g/3.26.651.6
- version/htc evo 4g/3.29.651.5
- version/htc evo 4g/3.30.651.2
- version/htc evo 4g/3.30.651.3
- version/htc evo 4g/3.70.651.1
- version/htc evo 4g/4.22.651.2
- version/htc evo 4g/4.24.651.1
- version/htc evo 4g/4.53.651.1
- version/htc evo 4g/gri40
- canonical/htc evo design 4g
- version/htc evo design 4g/1.19.651.1
- version/htc evo design 4g/1.19.651.0
- canonical/htc sdk api
- version/htc sdk api/2.76.651.6
- version/htc sdk api/1.17.651.1
- version/htc sdk api/2.75.651.4
- version/htc sdk api/2.75.651.5
- canonical/htc shift 4g software
- canonical/htc evo 3d
- version/htc evo 3d/2.08.651.3
- version/htc evo 3d/1.11.651.3
- version/htc evo 3d/1.13.651.7
- version/htc evo 3d/2.08.651.2
- version/htc evo 3d/gri40
- canonical/htc evo view 4g
- version/htc evo view 4g/1.22.651.2
- version/htc evo view 4g/1.22.651.1
- canonical/htc vivid
- version/htc vivid/3.26.502
- canonical/htc vivid software
- canonical/htc hero
- version/htc hero/1.29.651.1
- version/htc hero/1.56.651.2
- version/htc hero/2.27.651.5
- version/htc hero/2.27.651.6
- version/htc hero/2.31.651.7
- version/htc hero/2.32.651.2