PT-2015-6648 · Swiftkey · Swiftkey Sdk

Fuzion24 + 1 · Published 2015-06-19 · Updated 2016-12-07 · CVE-2015-4640

Mitre

CVSS v2.0

2.9

Low

Base vector

AV:A/AC:M/Au:N/C:N/I:P/A:N

The SwiftKey language-pack update implementation on Samsung Galaxy S4, S4 Mini, S5, and S6 devices relies on an HTTP connection to the skslm.swiftkey.net server, which allows man-in-the-middle attackers to write to language-pack files by modifying an HTTP response. NOTE: CVE-2015-4640 exploitation can be combined with CVE-2015-4641 exploitation for man-in-the-middle code execution.

Exploit

Fix

Weakness Enumeration

CWE-254

Related Identifiers

CVE-2015-4640

Affected Products

Swiftkey Sdk

References · 7

• 🔥 https://github.com/nowsecure/samsung-ime-rce-poc · Exploit
• 🔥 https://nowsecure.com/keyboard-vulnerability · Exploit
• 🔥 https://nowsecure.com/blog/2015/06/16/remote-code-execution-as-system-user-on-samsung-phones · Exploit
• 🔥 http://arstechnica.com/security/2015/06/new-exploit-turns-samsung-galaxy-phones-into-remote-bugging-devices · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2015-4640 · Security Note
• http://kb.cert.org/vuls/id/155412 · Note
• http://securityfocus.com/bid/75347 · Note