Large-Scale Analysis of Remote Code Injection Attacks in Android Apps

Table 2

Results of Google Play dataset (). All vulnerable apps were manually confirmed.

Category	Type	❶ Number of potentially vuln apps	❷ Number of flagged vuln apps
File overwrite vulnerabilities	Unsafe ZIP	75 (1.5%)	49
	Unsafe Content-Disposition	15 (0.3%)	0

❶ = static HTTP URL + dynamic URL; ❷ = ❶ − dynamic URL.