The Bluetooth service (com/android/phone/BluetoothHeadsetService.java) in Android 2.3 before 2.3.6 allows remote attackers within Bluetooth range to obtain contact data via an AT phonebook transfer.
| Software | From | Fixed in |
|---|---|---|
| google / android | 2.3.3 | 2.3.3.x |
| google / android | 2.3.5 | 2.3.5.x |
| google / android | 2.3.4 | 2.3.4.x |
| google / android | 2.3 | 2.3.x |