Improper input validation in Trustgo Antivirus \& Mobile Security

CVE-2013-3580

The TrustGo Antivirus & Mobile Security application before 1.3.6 for Android allows attackers to cause a denial of service (application crash) via a crafted application that sends an intent to com.trustgo.mobile.security.USSDScannerActivity with zero arguments.

Vulnerability class: Drupalgeddon 2 (CVE-2018-7600)

EPSS: 0.013 (66.9th percentile) — read the EPSS interpretation.

Affected products

Trustgo Antivirus_\&_mobile_security — versions 1.2.7, 1.2.8, 1.2.9
N/a — versions n/a

Weakness classification (CWE)

CWE-20 — Improper Input Validation

References

cret@cert.org (US Government Resource, x_refsource_CERT-VN, third-party-advisory)
cret@cert.org (x_refsource_CONFIRM, Vendor Advisory)