Approved changes feed: RSS · Atom

cpe:2.3:h:htc:evo_3d:*:*:*:*:*:*:*:*

part: h version: * update: *

VendorHtc (43d3c235-e197-5253-b42b-aac9a3b92e18)
ProductEvo 3D (ed6d7654-9c8c-5e70-b690-7f591e2260b4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2012-2217 vulnerable 2026-06-03 14:31:46.954119 Details available
The HTC IQRD service for Android on the HTC EVO 4G before 4.67.651.3, EVO Design 4G before 2.12.651.5, Shift 4G before 2.77.651.3, EVO 3D before 2.17.651.5, EVO View 4G before 2.23.651.1, Vivid before 3.26.502.56, and Hero does not restrict localhost access to TCP port 2479, which allows remote attackers to (1) send SMS messages, (2) obtain the Network Access Identifier (NAI) and its password, or trigger (3) popup messages or (4) tones via a crafted application that leverages the android.permission.INTERNET permission.
Published: 2012-05-01T14:00:00.000Z
Updated: 2024-08-06T19:26:08.929Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2011-3975 vulnerable 2026-06-03 14:31:22.292292 Details available
A certain HTC update for Android 2.3.4 build GRJ22, when the Sense interface is used on the HTC EVO 3D, EVO 4G, ThunderBolt, and unspecified other devices, provides the HtcLoggers.apk application, which allows user-assisted remote attackers to obtain a list of telephone numbers from a log, and other sensitive information, by leveraging the android.permission.INTERNET application permission and establishing TCP sessions to 127.0.0.1 on port 65511 and a second port.
Published: 2011-10-03T15:00:00.000Z
Updated: 2024-08-06T23:53:32.558Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.