Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The Visual Voice Mail (VVM) application through 2022-02-24 for Android allows persistent access if an attacker temporarily controls an application that has the READ_SMS permission, and reads an IMAP credentialing message that is (by design) not displayed to the victim within the AOSP SMS/MMS messaging application. (Often, the IMAP credentials are usable to listen to voice mail messages sent before the vulnerability was exploited, in addition to new ones.) NOTE: some vendors characterize this as not a "concrete and exploitable risk.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Visual Voice Mail 访问控制错误漏洞
Vulnerability Description
Visual Voice Mail是可视语音信箱。 Visual Voice Mail 中存在访问控制错误漏洞，该漏洞源于产品允许暂时获取读短信的权限并读取一个IMAP的认证消息。以下产品及版本受到影响：Visual Voice Mail 2022-02-24 版本。
CVSS Information
N/A
Vulnerability Type
N/A