Dirty Stream Attack, Turning Android Share Targets Into Attack Vectors

The Android operating system uses intents as its main means of exchanging information between applications. Besides messaging, file exchange is also possible by simply constructing an intent of action ACTION_SEND and using it to forward the desired file as an associated stream to another application. On the other end, the receiving app can define a filter in its manifest to inform the intent resolver to route the forwarded stream to a specific component.

While the sender application can construct an …

action android application applications attack attack vectors end exchange file file exchange forward information intent main messaging operating system share stream system