DerScanner
Home / Vulnerability Database / Config files : Insecure accessibility services usage
Config files

Config files : Insecure accessibility services usage

Classification

CWE
CWE-676
CWE/SANS Top 25 2011
CWE-676

Overview

Using the Android Accessibility Services features allows you to * read aloud text from the screen * change some display parameters (text size, highlighting, colors, location) to improve visibility * voice and gesture recognition.

In addition to these features, using Accessibility Services allows an installed malicious application to steal data from the screen and spoof user actions.

References

  1. How are we doing with Android’s overlay attacks in 2020?
  2. S.O.V.A. - A new Android Banking trojan with fowl intentions
  3. OWASP Top Ten 2017 A9:2017-Using Components with Known Vulnerabilities
  4. Use of Potentially Dangerous Function
LOW

DerScanner Severity Score

Do you want to fix Config files : Insecure accessibility services usage in your application?

See also

Config files

Config files : Text4Shell Vulnerability

Config files

Config files : Incorrect directory deletion

Config files

Config files : Code injection