PT-2017-2312 · Google+1 · Android+1

Chengjia4574 + 1 · Publicado 2017-06-14 · Atualizado 2019-10-03 · CVE-2017-0649

Positive Technologies (AI Summary)

CVSS v2.0

7.6

Alta

Vetor base

AV:N/AC:H/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Android (affected versions not specified)

Description The issue is related to an elevation of privilege vulnerability in the MediaTek sound driver, which could allow a local malicious application to execute arbitrary code within the context of the kernel. This vulnerability is rated as Moderate because it first requires compromising a privileged process and due to vulnerability-specific details that limit the impact of the issue. The vulnerability is associated with inadequate access control in the MediaTek sound driver, potentially allowing an attacker to elevate their privileges and execute arbitrary code in the kernel context using a local malicious application.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

BDU:2017-01510

CVE-2017-0649

Produtos afetados

Android

Mediatek Sound Driver

Referências · 6

• https://nvd.nist.gov/vuln/detail/CVE-2017-0649 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2017-0649 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2017-01510 · Nota de Segurança
• https://source.android.com/security/bulletin/2017-06-01 · Aviso do Fabricante
• http://securitytracker.com/id/1038623 · Nota
• http://securityfocus.com/bid/98866 · Nota