Security Advisory

CVE-2015-7889

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2017-12-27 18:00:00
Last updated 2024-08-06 08:06:30
Assigner mitre
CVSS score not scored
State PUBLISHED

Description

The SecEmailComposer/EmailComposer application in the Samsung S6 Edge before the October 2015 MR uses weak permissions for the com.samsung.android.email.intent.action.QUICK_REPLY_BACKGROUND service action, which might allow remote attackers with knowledge of the local email address to obtain sensitive information via a crafted application that sends a crafted intent.