PT-2015-2228 · Google+1 · Android+2

Jduck + 1 · Publicado 2015-08-09 · Atualizado 2017-09-21 · CVE-2015-1538

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Android versions prior to 5.1.1 LMY48I

Description The issue is related to an integer overflow in the SampleTable::setSampleToChunkParams function in libstagefright in Android. This allows remote attackers to execute arbitrary code via crafted atoms in MP4 data that trigger an unchecked multiplication. The vulnerability can be exploited to remotely execute code in affected devices.

Recommendations For Android versions prior to 5.1.1 LMY48I, update to version 5.1.1 LMY48I or later to resolve the issue. As a temporary workaround, consider restricting the use of the libstagefright library to minimize the risk of exploitation. Avoid using the SampleTable::setSampleToChunkParams function until a patch is available.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

BDU:2015-11574

CVE-2015-1538

Produtos afetados

Android

Huawei Vrp

Libstagefright

Referências · 14

• 🔥 https://github.com/jduck/cve-2015-1538-1 · Exploit
• 🔥 https://github.com/oguzhantopgul/cve-2015-1538-1 · Exploit
• 🔥 https://exploit-db.com/exploits/38124 · Exploit
• https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ · Aviso do Fabricante
• http://securitytracker.com/id/1033094 · Nota
• http://securityfocus.com/bid/76052 · Nota
• http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-448928.htm · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-1538 · Nota de Segurança
• https://huawei.com/en/psirt/security-advisories/hw-448928 · Nota
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1538 · Nota de Segurança
• https://android.googlesource.com/platform/frameworks/av/+/2434839bbd168469f80dd9a22f1328bc81046398 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2015-11574 · Nota de Segurança
• http://packetstormsecurity.com/files/134131/Libstagefright-Integer-Overflow-Check-Bypass.html · Nota
• http://huawei.com/en/psirt/security-advisories/hw-448928 · Nota