PT-2017-1894 · Google · Android

Publicado 2017-04-07 · Atualizado 2019-10-03 · CVE-2017-0544

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1

Description An elevation of privilege issue in the CameraBase component could allow a local malicious application to execute arbitrary code, rated as High due to local arbitrary code execution in a privileged process. The vulnerability is related to insufficient access control in the CameraBase component, which may allow an attacker to execute arbitrary code.

Recommendations For versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-672

CWE-264

Identificadores relacionados

BDU:2017-01054

CVE-2017-0544

Produtos afetados

Android

Referências · 6

• https://bdu.fstec.ru/vul/2017-01054 · Nota de Segurança
• https://source.android.com/security/bulletin/2017-04-01 · Aviso do Fabricante
• http://securityfocus.com/bid/97337 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-0544 · Nota de Segurança
• http://securitytracker.com/id/1038201 · Nota
• https://osv.dev/vulnerability/CVE-2017-0544 · Aviso do Fabricante