GSD-2021-1000040
- Source
- https://data.gsd.id/GSD-2021-1000040
- Import Source
- https://github.com/cloudsecurityalliance/gsd-database/blob/main/2021/1000xxx/GSD-2021-1000040.json
- JSON Data
- https://api.osv.dev/v1/vulns/GSD-2021-1000040
- Withdrawn
- 2023-03-14T07:04:18.324904Z
- Published
- 2021-05-31T15:39:45.031586Z
- Modified
- 2023-03-14T07:04:18.324904Z
- Summary
- update freeze attack in DroidScript version all versions
- Details
-
DroidScript, all versions, were removed from the Google store after allegations of malware and ad fraud surfaced from Google. It is reported that ad clicking activity did take place but that it was not as a direct result from DriodScript themselves. However due to the removal of DroidScript it is unlikely that many DroidScript based applications will receive security updates, creating a significant vulnerability (effectively an update freeze attack).
- References
-
- https://groups.google.com/g/androidscript/c/Mbh5TZ6YYnA/m/GflwflqaDAAJ
- https://droidscript.org/
- https://twitter.com/droidscript/status/1385956513433456640?ref_src=twsrc%5Etfw%7Ctwcamp%5Eembeddedtimeline%7Ctwterm%5Eprofile%3Adroidscript%7Ctwgr%5EeyJ0ZndfZXhwZXJpbWVudHNfY29va2llX2V4cGlyYXRpb24iOnsiYnVja2V0IjoxMjA5NjAwLCJ2ZXJzaW9uIjpudWxsfSwidGZ3X2hvcml6b25fdHdlZXRfZW1iZWRfOTU1NSI6eyJidWNrZXQiOiJodGUiLCJ2ZXJzaW9uIjpudWxsfX0%3D%7Ctwcon%5Etimelinechrome&ref_url=https%3A%2F%2Fdroidscript.org%2Fnews-2%2F