CVE-2011-1717

EUVD-2011-1716
Skype for Android stores sensitive user data without encryption in sqlite3 databases that have weak permissions, which allows local applications to read user IDs, contacts, phone numbers, date of birth, instant message logs, and other private information.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
2.1 UNKNOWN
LOCAL
LOW
AV:L/AC:L/Au:N/C:P/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 9%
Affected Products (NVD)
VendorProductVersion
skypeskype_for_android
*
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://blogs.skype.com/security/2011/04/privacy_vulnerability_in_skype.html
http://www.androidpolice.com/2011/04/14/exclusive-vulnerability-in-skype-for-android-is-exposing-your-name-phone-number-chat-logs-and-a-lot-more/
http://www.securitytracker.com/id?1025387
http://www.theregister.co.uk/2011/04/15/skype_for_android_vulnerable/
http://blogs.skype.com/security/2011/04/privacy_vulnerability_in_skype.html
http://www.androidpolice.com/2011/04/14/exclusive-vulnerability-in-skype-for-android-is-exposing-your-name-phone-number-chat-logs-and-a-lot-more/
http://www.securitytracker.com/id?1025387
http://www.theregister.co.uk/2011/04/15/skype_for_android_vulnerable/