In effect, this vulnerability allows attackers to call on ShareIt's file-content provider and pass it a file path to get access to all of its data files. However, the developers behind ShareIt haven't given much thought to limit the app's content-provider capabilities, which can give attackers access to all files in ShareIt's 'private' directory.

It's up to developers to sanitize these cross-app capabilities and only expose the necessary file manager capabilities to Gmail and other apps.' If Gmail wants to attach a file to an email, it can do that by showing a list of available file-content providers installed on your phone (it's basically an 'open with' dialog box), and the user can pick their favorite file manager, navigate through their storage, and pass the file they want to Gmail. The publication notes: 'Android prides itself on intra-app communication, partly because any app can create a content provider and provide its content and services to other apps. Meaning, that both the receiving and sending smartphone or tablet must have SHAREit - Connect & Transfer running for transfers to complete.Elaborating on one of the vulnerabilities, Ars Technica reveals that ShareIt has one common Android app vulnerability that can give attackers read/write access to all of its files. The only thing is that you have to install this app on both ends. SHAREit - Connect & Transfer is an app for speedy transfers between all kinds of devices. Share anything from more usual file formats (photos, videos, MP3s) onto less common file formats like address books, APKs, or any other file type stored on your smartphone. Otherwise, create groups of users so you can transfer any file to several people at once. That means your files send from your Android to an iPhone, iPad, and even onto a Windows PC. With SHAREit - Connect & Transfer, you easily send files between two devices, regardless of their OS. SHAREit - Connect & Transfer is an app to transfer files from one device to another much faster than via Bluetooth or regular WiFi.

Shareit app download for iphone