Click here to Skip to main content
15,902,635 members
Home / Discussions / Android
   

Android

 
GeneralRe: Make a call from my contact list Pin
Member 1275186521-Sep-16 22:23
Member 1275186521-Sep-16 22:23 
QuestionRe: Make a call from my contact list Pin
David Crow21-Sep-16 6:32
David Crow21-Sep-16 6:32 
AnswerRe: Make a call from my contact list Pin
Member 1275186521-Sep-16 20:27
Member 1275186521-Sep-16 20:27 
QuestionRe: Make a call from my contact list Pin
David Crow22-Sep-16 2:23
David Crow22-Sep-16 2:23 
QuestionAndroid - Information leakage flaw OutputStream Pin
Member 1235809712-Sep-16 21:24
Member 1235809712-Sep-16 21:24 
QuestionRe: Android - Information leakage flaw OutputStream Pin
David Crow13-Sep-16 3:23
David Crow13-Sep-16 3:23 
AnswerRe: Android - Information leakage flaw OutputStream Pin
Afzaal Ahmad Zeeshan13-Sep-16 7:10
professionalAfzaal Ahmad Zeeshan13-Sep-16 7:10 
GeneralRe: Android - Information leakage flaw OutputStream Pin
Member 1235809720-Sep-16 20:56
Member 1235809720-Sep-16 20:56 
here is the complete description by vera code,

C#
Associated Flaws by CWE ID:
	 	Information Exposure Through Sent Data (CWE ID 201)(5 flaws)
Description
Sensitive information may be exposed as a result of outbound network connections made by the application.  This can manifest in a couple of different ways.
In C/C++ applications, sometimes the developer fails to zero out a buffer before populating it with data.  This can cause information leakage if, for example, the buffer contains a data structure for which only certain fields were populated. The uninitialized fields would contain whatever data is present at that memory location.  Sensitive information from previously allocated variables could then be leaked when the buffer is sent over the network.
Mobile applications may also transmit sensitive information such as email or SMS messages, address book entries, GPS location data, and anything else that can be accessed by the mobile API.  This behavior is common in mobile spyware applications designed to exfiltrate data to a listening post or other data collection point.  This flaw is categorized as low severity because it only impacts confidentiality, not integrity or availability.  However, in the context of a mobile application, the significance of an information leak may be much greater, especially if misaligned with user expectations or data privacy policies.
Effort to Fix: 2 - Implementation error. Fix is approx. 6-50 lines of code. 1 day to fix.
Recommendations
In C/C++ applications, ensure that all struct elements are initialized or zeroed before being sent.  In mobile applications, ensure that the transfer of sensitive data is intended and that it does not violate application security policy or user expectations.

GeneralRe: Android - Information leakage flaw OutputStream Pin
Richard MacCutchan20-Sep-16 22:16
mveRichard MacCutchan20-Sep-16 22:16 
GeneralRe: Android - Information leakage flaw OutputStream Pin
Member 1235809720-Sep-16 23:46
Member 1235809720-Sep-16 23:46 
GeneralRe: Android - Information leakage flaw OutputStream Pin
Member 1235809720-Sep-16 23:55
Member 1235809720-Sep-16 23:55 
GeneralRe: Android - Information leakage flaw OutputStream Pin
Richard MacCutchan21-Sep-16 1:57
mveRichard MacCutchan21-Sep-16 1:57 
GeneralRe: Android - Information leakage flaw OutputStream Pin
Member 1235809721-Sep-16 3:13
Member 1235809721-Sep-16 3:13 
GeneralRe: Android - Information leakage flaw OutputStream Pin
Richard MacCutchan21-Sep-16 3:37
mveRichard MacCutchan21-Sep-16 3:37 
QuestionInvestigate Which App controls Infrared???? Pin
Member 127177612-Sep-16 13:54
Member 127177612-Sep-16 13:54 
JokeRe: Investigate Which App controls Infrared???? Pin
Richard MacCutchan2-Sep-16 21:10
mveRichard MacCutchan2-Sep-16 21:10 
GeneralRe: Investigate Which App controls Infrared???? Pin
Member 127177613-Sep-16 6:16
Member 127177613-Sep-16 6:16 
GeneralRe: Investigate Which App controls Infrared???? Pin
Richard MacCutchan3-Sep-16 6:29
mveRichard MacCutchan3-Sep-16 6:29 
GeneralRe: Investigate Which App controls Infrared???? Pin
Member 127177613-Sep-16 8:51
Member 127177613-Sep-16 8:51 
GeneralRe: Investigate Which App controls Infrared???? Pin
Richard MacCutchan3-Sep-16 20:40
mveRichard MacCutchan3-Sep-16 20:40 
GeneralRe: Investigate Which App controls Infrared???? Pin
Member 1235809720-Sep-16 23:52
Member 1235809720-Sep-16 23:52 
GeneralRe: Investigate Which App controls Infrared???? Pin
Richard MacCutchan21-Sep-16 1:59
mveRichard MacCutchan21-Sep-16 1:59 
GeneralI need some intermediate/advance android books to futhur increase my knowledge? Pin
Member 118283651-Sep-16 19:43
Member 118283651-Sep-16 19:43 
GeneralRe: I need some intermediate/advance android books to futhur increase my knowledge? Pin
Richard MacCutchan1-Sep-16 21:10
mveRichard MacCutchan1-Sep-16 21:10 
SuggestionRe: I need some intermediate/advance android books to futhur increase my knowledge? Pin
David Crow2-Sep-16 16:09
David Crow2-Sep-16 16:09 

General General    News News    Suggestion Suggestion    Question Question    Bug Bug    Answer Answer    Joke Joke    Praise Praise    Rant Rant    Admin Admin   

Use Ctrl+Left/Right to switch messages, Ctrl+Up/Down to switch threads, Ctrl+Shift+Left/Right to switch pages.