PT-2015-2204 · Google · Android

Jordan · Published 2015-10-01 · Updated 2017-09-16 · CVE-2015-3864

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Android versions prior to 5.1.1 LMY48M

Description The issue is caused by an integer underflow in the MPEG4Extractor::parseChunk function in the libstagefright library of the Android operating system. This allows a remote attacker to execute arbitrary code by providing specially crafted MPEG-4 data. The vulnerability exists due to an incomplete fix for a previous issue.

Recommendations For Android versions prior to 5.1.1 LMY48M, update to version 5.1.1 LMY48M or later to resolve the issue. As a temporary workaround, consider restricting the use of the MPEG4Extractor::parseChunk function until a patch is available. Avoid using specially crafted MPEG-4 data in the affected API endpoint until the issue is resolved.

Exploit

Fix

Weakness Enumeration

CWE-189

Related Identifiers

BDU:2015-11550

CVE-2015-3864

Affected Products

Android

References · 13

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/android/browser/stagefright_mp4_tx3g_64bit.rb · Exploit
• 🔥 https://github.com/eudemonics/scaredycat · Exploit
• 🔥 https://github.com/pwnaccelerator/stagefright-cve-2015-3864 · Exploit
• 🔥 https://exploit-db.com/exploits/40436 · Exploit
• 🔥 https://exploit-db.com/exploits/39640 · Exploit
• 🔥 https://exploit-db.com/exploits/38226 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-3864 · Security Note
• https://groups.google.com/forum/message/raw?msg=android-security-updates/1M7qbSvACjo/Y7jewiW1AwAJ · Vendor Advisory
• https://android.googlesource.com/platform/frameworks/av/+/6fe85f7e15203e48df2cc3e8e1c4bc6ad49dc968 · Vendor Advisory
• https://bdu.fstec.ru/vul/2015-11550 · Security Note
• http://securityfocus.com/bid/76682 · Note
• https://blog.zimperium.com/cve-2015-3864-metasploit-module-now-available-for-testing · Note
• https://blog.zimperium.com/reflecting-on-stagefright-patches · Note