漏洞标题
N/A
漏洞描述信息
Tecno Camon iAir 2 Plus 安卓设备，构建指纹为TECNO/H622/TECNO-ID3k:8.1.0/O11019/E-180914V83:user/release-keys，设备预装平台应用，package name为com.lovelyfont.defcontainer(版本Code=7，版本Name=7.0.11)。该应用包含一个名为com.lovelyfont.manager.FontCoverService的导出服务，该服务允许在设备上合并的的任何应用程序通过shell脚本通过命令行提供任意命令，以系统用户身份执行，通过将攻击者选择的文本写入日志日志触发。用户无法禁用此应用，攻击可通过零权限应用程序进行。作为系统用户执行命令，允许第三方应用程序视频录制用户的屏幕、重启设备、获取用户通知、读取日志日志、在图形用户界面(GUI)中注入事件，获取用户文本消息等。作为系统用户执行命令，允许第三方应用程序重启设备、获取用户通知、读取日志日志、在GUI中注入事件、将默认输入编辑器(IME)(例如，键盘)更改为包含键记录功能的应用程序，获取用户文本消息等。
CVSS信息
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
漏洞类别
N/A
漏洞标题
N/A
漏洞描述信息
The Tecno Camon iAir 2 Plus Android device with a build fingerprint of TECNO/H622/TECNO-ID3k:8.1.0/O11019/E-180914V83:user/release-keys contains a pre-installed platform app with a package name of com.lovelyfont.defcontainer (versionCode=7, versionName=7.0.11). This app contains an exported service named com.lovelyfont.manager.FontCoverService that allows any app co-located on the device to supply arbitrary commands via shell script to be executed as the system user that are triggered by writing an attacker-selected message to the logcat log. This app cannot be disabled by the user and the attack can be performed by a zero-permission app. Executing commands as the system user can allow a third-party app to video record the user's screen, factory reset the device, obtain the user's notifications, read the logcat logs, inject events in the Graphical User Interface (GUI), and obtains the user's text messages, and more. Executing commands as the system user can allow a third-party app to factory reset the device, obtain the user's notifications, read the logcat logs, inject events in the GUI, change the default Input Method Editor (IME) (e.g., keyboard) with one contained within the attacking app that contains keylogging functionality, and obtains the user's text messages, and more.
CVSS信息
N/A
漏洞类别
N/A
漏洞标题
传音 Tecno Camon iAir 2 Plus 操作系统命令注入漏洞
漏洞描述信息
传音 Tecno Camon iAir 2 Plus是中国传音公司的一款智能手机。 传音 Tecno Camon iAir 2 Plus（build fingerprint：TECNO/H622/TECNO-ID3k:8.1.0/O11019/E-180914V83:user/release-keys）中的com.lovelyfont.defcontainer存在安全漏洞。攻击者可利用该漏洞以系统权限执行代码或命令，进而进行录屏，恢复出厂设置，获取用户Wi-Fi密码，读取logcat日志，向GUI注入事件
CVSS信息
N/A
漏洞类别
授权问题