PT-2017-2848 · Google · Android+1

Mingjian Zhou + 1 · Publicado 2017-06-19 · Atualizado 2019-10-03 · CVE-2017-0769

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Android versions 7.0, 7.1.1, 7.1.2, 8.0

Description The issue is related to an elevation of privilege vulnerability in the Android media framework, specifically in the libstagefright library. This vulnerability is associated with insufficient access control, which can be exploited by a remote attacker to gain elevated privileges.

Recommendations For Android versions 7.0, 7.1.1, 7.1.2, 8.0, update to a version that includes the fix for the libstagefright library issue. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Improper Resource Release

Enumeração de Fraquezas

CWE-264

CWE-404

Identificadores relacionados

BDU:2017-02128

CVE-2017-0769

Produtos afetados

Android

Libstagefright

Referências · 5

• http://securityfocus.com/bid/100649 · Nota
• https://source.android.com/security/bulletin/2017-09-01 · Aviso do Fabricante
• https://osv.dev/vulnerability/CVE-2017-0769 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-0769 · Nota de Segurança
• https://bdu.fstec.ru/vul/2017-02128 · Nota de Segurança