CVEvulnerability
CVE-2011-1717
2.1 LOW
Official page ↗
- Status
- Modified
- Published
- 2011-04-18
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 2.1 LOW — AV:L/AC:L/Au:N/C:P/I:N/A:N
- Weaknesses
- CWE-264
Description
Skype for Android stores sensitive user data without encryption in sqlite3 databases that have weak permissions, which allows local applications to read user IDs, contacts, phone numbers, date of birth, instant message logs, and other private information.
Affected configurations
• skype skype for android
Related
Weakness · not in database (1)
References
- http://blogs.skype.com/security/2011/04/privacy_vulnerability_in_skype.html blogs.skype.com
- http://www.androidpolice.com/2011/04/14/exclusive-vulnerability-in-skype-for-android-is-exposing-your-name-phone-number-chat-logs-and-a-lot-more/ Exploit
- http://www.securitytracker.com/id?1025387 www.securitytracker.com
- http://www.theregister.co.uk/2011/04/15/skype_for_android_vulnerable/ www.theregister.co.uk
- http://blogs.skype.com/security/2011/04/privacy_vulnerability_in_skype.html blogs.skype.com
- http://www.androidpolice.com/2011/04/14/exclusive-vulnerability-in-skype-for-android-is-exposing-your-name-phone-number-chat-logs-and-a-lot-more/ Exploit
- http://www.securitytracker.com/id?1025387 www.securitytracker.com
- http://www.theregister.co.uk/2011/04/15/skype_for_android_vulnerable/ www.theregister.co.uk