PT-2018-4134 · Google · Android

Publicado 2018-04-18 · Atualizado 2018-05-09 · CVE-2014-10039

Positive Technologies (AI Summary)

CVSS v2.0

10

Alta

Vetor base

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Android versions prior to 2018-04-05 security patch level

Description The issue occurs when qsee app entry return() is called without first calling qsee app entry(), causing the stack to be restored to an older state and resulting in a return to an unexpected location. This affects devices with Qualcomm Snapdragon Mobile MDM9625, SD 400, and SD 800.

Recommendations For Android versions prior to 2018-04-05 security patch level, ensure that qsee app entry() is called before qsee app entry return() to prevent the stack from being restored to an older state. As a temporary workaround, consider restricting the use of qsee app entry return() until a patch is available.

Correção

Enumeração de Fraquezas

CWE-19

Identificadores relacionados

CVE-2014-10039

Produtos afetados

Android

Referências · 3

• http://securityfocus.com/bid/103671 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2014-10039 · Nota de Segurança
• https://source.android.com/security/bulletin/2018-04-01 · Aviso do Fabricante