PT-2017-7291 · Samsung · Samsung S6 Edge

Publicado 2017-12-27 · Atualizado 2018-01-17 · CVE-2015-7889

Positive Technologies (AI Summary)

CVSS v2.0

4.3

Média

Vetor base

AV:N/AC:M/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Samsung S6 Edge versions prior to October 2015 MR

Description The issue concerns weak permissions in the SecEmailComposer/EmailComposer application. This weakness might allow remote attackers with knowledge of the local email address to obtain sensitive information via a crafted application that sends a crafted intent to the com.samsung.android.email.intent.action.QUICK REPLY BACKGROUND service action.

Recommendations For Samsung S6 Edge versions prior to October 2015 MR, update to a version released after the October 2015 MR to resolve the issue.

Exploit

Correção

Enumeração de Fraquezas

CWE-275

Identificadores relacionados

CVE-2015-7889

Produtos afetados

Samsung S6 Edge

Referências · 5

• 🔥 https://exploit-db.com/exploits/38558 · Exploit
• http://packetstormsecurity.com/files/134105/Samsung-SecEmailComposer-QUICK_REPLY_BACKGROUND-Permission-Weakness.html · Nota
• https://bugs.chromium.org/p/project-zero/issues/detail?id=490&redir=1 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2015-7889 · Nota de Segurança
• http://securityfocus.com/bid/77339 · Nota