CVE:CVE-2012-2980
CNNVD:CNNVD-201208-311
T-Mobile myTouch 3G Slide、HTC Merge、Sprint EVO Shift 4G、HTC ChaCha、AT&T Status、HTC Desire Z、T-Mobile G2、T-Mobile myTouch 4G Slide、Samsung Galaxy S stores中的Android中的Samsung和HTC onTouchEvent方法实现中存在漏洞，该漏洞源于dmesg缓冲区中的触摸坐标。远程攻击者利用该漏洞通过特制的应用程序获得敏感信息，如PIN号码，电话号码以及文本信息。
solution:Upgrade att status to a higher version than -; Upgrade htc chacha to a higher version than -; Upgrade htc desire to a higher version than -; Upgrade htc merge to a higher version than -; Upgrade samsung galaxy_s to a higher version than -; Upgrade sprint evo_shift_4g to a higher version than -; Upgrade t-mobile g2 to a higher version than -; Upgrade t-mobile mytouch_3g_slide to a higher version than -; Upgrade t-mobile mytouch_4g_slide to a higher version than -