CVE-2015-7889: Medium severity android vulnerability
The SecEmailComposer/EmailComposer application in the Samsung S6 Edge before the October 2015 MR uses weak permissions for the com.samsung.android.email.intent.action.QUICKREPLYBACKGROUND service action, which might allow remote attackers with knowledge of the local email address to obtain sensitive information via a crafted application that sends a crafted intent.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2015-7889?
CVE-2015-7889 is a vulnerability in the SecEmailComposer/EmailComposer application in the Samsung S6 Edge before the October 2015 MR.
How severe is CVE-2015-7889?
CVE-2015-7889 has a severity level of 5.5 (medium).
What is the affected software?
The affected software includes Android version up to and including 5.1.1 and the Samsung Galaxy S6 Edge.
How can remote attackers exploit CVE-2015-7889?
Remote attackers with knowledge of the local email address can exploit CVE-2015-7889 to obtain sensitive information.
Are there any references for CVE-2015-7889?
Yes, you can find more information about CVE-2015-7889 at the following references: [1](http://packetstormsecurity.com/files/134105/Samsung-SecEmailComposer-QUICK_REPLY_BACKGROUND-Permission-Weakness.html), [2](http://www.securityfocus.com/bid/77339), [3](https://bugs.chromium.org/p/project-zero/issues/detail.id=490&redir=1)