AppSec has reported a security issue in Voxofon - International Calls for Android, which can be exploited by malicious people to bypass certain security restrictions.

The security issue is caused due to an unspecified error and can be exploited to disclose certain sensitive information like e.g. SMS content, sending timestamps, recipient's phone number and sending state and manipulate certain data.

Successful exploitation requires that a malicious application is installed.

The security issue is reported in version 2.4.3. Other versions may also be affected.

Solution
Reportedly fixed in version 2.5.2.

Provided and/or discovered by
Daoyuan Wu, Xiapu Luo, and Rocky K. C. Chang Department of Computing, The Hong Kong Polytechnic University

Original Advisory
http://www4.comp.polyu.edu.hk/~appsec/bugs/CVE-2011-4704-vulnerability-in-Voxofon.html

Deep Links
Links available to Secunia VIM customers