Vulnerability Summary Title: Vulnerability in App Lock for Android Date: 09 Mar 2012 Authors: Daoyuan Wu, Xiapu Luo, Rocky K. C. Chang (Equal Contributions) CVE ID: CVE-2012-1408 Category: To Be Confirmed Application Information Archive Time: Mar 9, 2012 at 6:50 PM HKT Package Name: com.cc.applock Full Name: App Lock - App Protector Affected Version: 1.7.5 (Latest Version in 09 Mar 2012) Package Installs: 1,000,000 - 5,000,000 Market Link: https://market.android.com/details?id=com.cc.applock Update Log: 1.7.6, the latest version in Mar 12 2012 HKT, also has this vulnerability. Vulnerability Details Status: Details only release to related vendor. Vendor Response Contact Time: No longer maintain Confirm Time: No longer maintain Patched Time: Unknown Patched Status: Unknown Important Notes Although we only mention one or several affected versions in our report, other versions may also be vulnerable, e.g., lower version, pad version, or paid version. Related Vulnerabilities 14 Mar 2012: Vulnerability in NetFront Life Browser for Android 14 Mar 2012: Vulnerability in WaliSMS CN (瓦力短信) for Android 14 Mar 2012: Vulnerability in Message Forwarder for Android