PT-2013-1391 · Google · Android

Publicado 2013-02-05 · Atualizado 2013-02-07 · CVE-2011-1350

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:N/A:N

Name of the Vulnerable Software and Affected Versions Android versions prior to 2.3.6

Description The issue allows attackers to obtain potentially sensitive information from kernel stack memory. This is achieved through an application that uses a crafted length parameter in a request to the pvrsrvkm device.

Recommendations For versions prior to 2.3.6, update to version 2.3.6 or later to resolve the issue.

Exploit

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

CVE-2011-1350

Produtos afetados

Android

Referências · 7

• 🔥 https://exploit-db.com/exploits/38310 · Exploit
• https://ubuntu.com/security/CVE-2011-1350 · Aviso do Fabricante
• http://code.google.com/p/android/issues/detail?id=21522 · Aviso do Fabricante
• http://jon.oberheide.org/files/levitator.c · Nota
• https://osv.dev/vulnerability/UBUNTU-CVE-2011-1350 · Aviso do Fabricante
• https://cve.org/CVERecord?id=CVE-2011-1350 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2011-1350 · Nota de Segurança