demo007 / keepassdroid

Automatically exported from code.google.com/p/keepassdroid
0 stars 0 forks source link

Exploit via clipboard #757

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago
What steps will reproduce the problem?
1.Download and install ClipCaster
2.Copy to clipboard any password via keepassdroid
3.ClipCaster will demonstrate how is sniffed out the password immediately 

What is the expected output? What do you see instead?

expected: no unrelated application will have access to my password

instead: an unrelated app got access to my password. Luckily it was a benign 
one.

What version of the product are you using? On what operating system?

KeePassDroid 2.0 from F-Droid
Android 4.4.4 CyanogenMod 11

Please provide any additional information below.

https://play.google.com/store/apps/details?id=com.actisec.clipcaster

I hope this gets fixed soon, until then I can't use this while any application 
has access to every password I cop from the clipboard.

Original issue reported on code.google.com by nivgolds...@gmail.com on 8 Jan 2015 at 8:36