PT-2015-2251 · Google · Android

Published 2015-10-06 · Updated 2015-10-07 · CVE-2015-3862

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Android versions prior to 5.1.1 LMY48T

Description The issue is related to errors in the code of the mediaserver component in the Android operating system. It allows attackers to cause a denial of service, resulting in a process crash, via unspecified vectors. Exploitation of this issue can enable a remote attacker to cause a denial of service.

Recommendations For Android versions prior to 5.1.1 LMY48T, update to version 5.1.1 LMY48T or later to resolve the issue.

Fix

Weakness Enumeration

CWE-17

Related Identifiers

BDU:2015-11605

CVE-2015-3862

Affected Products

Android

References · 3

• https://nvd.nist.gov/vuln/detail/CVE-2015-3862 · Security Note
• https://bdu.fstec.ru/vul/2015-11605 · Security Note
• https://groups.google.com/forum/message/raw?msg=android-security-updates/_Rm-lKnS2M8/dGTcilt0CAAJ · Vendor Advisory