PT-2017-19135 · Mozilla+3 · Firefox Os+3

Publicado 2017-11-16 · Atualizado 2017-11-30 · CVE-2017-9721

Positive Technologies (AI Summary)

CVSS v2.0

4.6

Média

Vetor base

AV:L/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Android for MSM (affected versions not specified) Firefox OS for MSM (affected versions not specified) QRD Android (affected versions not specified)

Description A buffer overflow issue exists in the boot loader while parsing the splash image, potentially affecting various Android releases that utilize the Linux kernel.

Recommendations For Android for MSM, update the boot loader to a version that fixes the buffer overflow issue. For Firefox OS for MSM, update the boot loader to a version that fixes the buffer overflow issue. For QRD Android, update the boot loader to a version that fixes the buffer overflow issue. As a temporary workaround, consider disabling the splash image parsing functionality in the boot loader until a patch is available.

Correção

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2017-9721

Produtos afetados

Android

Firefox Os

Linux Kernel

Qrd Android

Referências · 2

• https://source.android.com/security/bulletin/pixel/2017-11-01 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-9721 · Nota de Segurança