Dropbox SDK for Android before 1.6.2 might allow remote attackers to obtain sensitive information via crafted malware or via a drive-by download attack.
Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8889
Reference (s):
- BID:73035
- URL: http://www.securityfocus.com/bid/73035
- BUGTRAQ:20150311 Vulnerability in the Dropbox SDK for Android (CVE-2014-8889)
- URL: http://www.securityfocus.com/archive/1/534843/100/1500/threaded
- FULLDISC:20150311 Vulnerability in the Dropbox SDK for Android (CVE-2014-8889)