Published: 2016/07/22  Last Updated: 2016/07/22

Information from KDDI CORPORATION

Vulnerability ID:JVN#06212291
Title:Android OS Contacts app fails to restrict access permissions
Status:Vulnerable, investigating

This is a statement from the vendor itself with no modification by JPCERT/CC.

Affected producs are as shown below. Please apply software update when available.

INFOBAR A02 Under study for fixing
HTC J butterfly HTL21 Under study for fixing
GALAXY SⅢ Progre SCL21 Fix available through OS update
G'zOne TYPE-L CAL21 Under study for fixing
AQUOS PHONE SERIE SHL21 Fix available through OS update
DIGNO S KYL21 Under study for fixing
ARROWS ef FJL21 Fix available through OS update
Xperia VL SOL21 Under impact assessment
Optimus G LGL21 Under study for fixing
VEGA PTL21 Fix available through OS update
ARROWS Z ISW13F Under study for fixing
AQUOS PHONE CL IS17SH Under study for fixing
AQUOS PHONE SL IS15SH Under study for fixing
AQUOS PHONE SERIE ISW16SH Under study for fixing
URBANO PROGRESSO Under study for fixing
HTC J ISW13HT Under study for fixing
Xperia acro HD IS12S Under study for fixing
MOTOROLA RAZR IS12M Under study for fixing
GALAXY SII WiMAX ISW11SC Under study for fixing
Optimus X IS11LG Under study for fixing
ARROWS Z ISW11F Under study for fixing
HTC EVO 3D ISW12HT Under study for fixing
AQUOS PAD SHT21 Fix available through OS update
Smart TV Stick Under study for fixing