PT-2015-2636 · Google+1 · Android+1

Publicado 2015-11-03 · Atualizado 2016-12-07 · CVE-2015-6609

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Android versions prior to 5.1.1 LMY48X Android versions prior to 6.0 2015-11-01

Description The issue allows remote attackers to execute arbitrary code or cause a denial of service due to memory corruption via a crafted audio file. It is caused by a buffer overflow in the libutils library of the Android operating system.

Recommendations For Android versions prior to 5.1.1 LMY48X, update to version 5.1.1 LMY48X or later. For Android versions prior to 6.0 2015-11-01, update to a version released after 2015-11-01.

Correção

DoS

RCE

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

BDU:2015-12001

CVE-2015-6609

Produtos afetados

Android

Debian

Referências · 14

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6609 · Nota de Segurança
• https://cve.org/CVERecord?id=CVE-2015-6609 · Nota de Segurança
• https://bdu.fstec.ru/vul/2015-12001 · Nota de Segurança
• https://ubuntu.com/security/CVE-2015-6609 · Aviso do Fabricante
• https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-6609 · Nota
• https://groups.google.com/forum/message/raw?msg=android-security-updates/n1aw2MGce4E/jhpVEWDUCAAJ · Aviso do Fabricante
• https://packages.debian.org/src:android-platform-frameworks-native · Nota
• https://security-tracker.debian.org/tracker/source-package/android-platform-frameworks-native · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2015-6609 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-6609 · Nota de Segurança
• http://securitytracker.com/id/1034049 · Nota
• https://osv.dev/vulnerability/DEBIAN-CVE-2015-6609 · Aviso do Fabricante
• https://security-tracker.debian.org/tracker/CVE-2015-6609 · Aviso do Fabricante
• https://osv.dev/vulnerability/UBUNTU-CVE-2015-6609 · Aviso do Fabricante