PT-2015-3167 · Google · Android

Flanker_Hqd + 4 · Publicado 2015-12-08 · Atualizado 2019-02-12 · CVE-2015-6626

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Android versions prior to 5.1.1 LMY48Z Android versions prior to 6.0 before 2015-12-01

Description The issue is related to the libstagefright library in the Android operating system and is caused by a lack of protection for service data. It allows a remote attacker to obtain sensitive information and bypass an unspecified protection mechanism. The attacker can gain Signature or SignatureOrSystem access via unknown vectors.

Recommendations For Android versions prior to 5.1.1 LMY48Z, update to version 5.1.1 LMY48Z or later. For Android versions prior to 6.0 before 2015-12-01, update to version 6.0 from 2015-12-01 or later.

Correção

Information Disclosure

Enumeração de Fraquezas

CWE-200

Identificadores relacionados

BDU:2016-00518

CVE-2015-6626

Produtos afetados

Android

Referências · 3

• http://source.android.com/security/bulletin/2015-12-01.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2015-6626 · Nota de Segurança
• https://bdu.fstec.ru/vul/2016-00518 · Nota de Segurança