CVE-2011-4866 Information

Description

The Kaixin001 (com.kaixin001.activity) application 1.3.1 and 1.3.3 for Android does not properly protect data which allows remote attackers to read or modify contact information and a cleartext password via a crafted application.

Reference

http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2011-4866-vulnerability-in-Kaixin001.html