PT-2015-1272 · Google · Android

Guang Gong · Publicado 2015-02-15 · Atualizado 2017-09-29 · CVE-2015-1474

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Android versions through 5.0

Description The issue is related to multiple integer overflows. Exploitation of these overflows may allow an attacker to gain privileges or cause a denial of service by passing a large number of file descriptors or integer values. Specifically, the GraphicBuffer::unflatten function in the platform/frameworks/native/libs/ui/GraphicBuffer.cpp is affected.

Recommendations For Android versions through 5.0, consider restricting access to the GraphicBuffer::unflatten function as a temporary workaround until a patch is available. Additionally, avoid using large numbers of file descriptors or integer values in affected API endpoints to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

BDU:2015-10302

CVE-2015-1474

Produtos afetados

Android

Referências · 10

• 🔥 https://github.com/p1gl3t/CVE-2015-1474_poc · Exploit
• 🔥 http://packetstormsecurity.com/files/130778/Google-Android-Integer-Oveflow-Heap-Corruption.html · Exploit
• http://seclists.org/fulldisclosure/2015/Mar/63 · Nota
• https://bdu.fstec.ru/vul/2015-10302 · Nota de Segurança
• https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-1474 · Nota
• http://securityfocus.com/bid/72788 · Nota
• https://android.googlesource.com/platform/frameworks/native/+/38803268570f90e97452cd9a30ac831661829091 · Correção
• https://nvd.nist.gov/vuln/detail/CVE-2015-1474 · Nota de Segurança
• http://securitytracker.com/id/1031875 · Nota
• https://blackhat.com/docs/us-15/materials/us-15-Gong-Fuzzing-Android-System-Services-By-Binder-Call-To-Escalate-Privilege.pdf · Nota