writeups.xyz / SHAREit Flaw Could Lead to Remote Code Execution

Submitter : c2a

Date: 15 February 2021

Bounty : undisclosed

Vulnerabilities :

• Android
• RCE
• MiTM
• Man-in-the-Disk Attack
• Insecure Intent
• Vulnerable Android Content Provider

Programs :

• SHAREit

Authors :

• Echo Duan
• Jesse Chang

Link :
https://www.trendmicro.com/en_us/research/21/b/shareit-flaw-could-lead-to-remote-code-execution.html