PT-2016-5746 · Google · Aosp Mail

Guang Gong + 1 · Published 2016-10-10 · Updated 2016-11-28 · CVE-2016-3918

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions AOSP Mail versions 4.x through 4.4.3 AOSP Mail versions 5.0.x through 5.0.1 AOSP Mail versions 5.1.x through 5.1.0 AOSP Mail versions 6.x before 2016-10-01 AOSP Mail versions 7.0 before 2016-10-01

Description The issue allows attackers to read arbitrary attachments via a crafted application that provides a pathname value. This is due to the failure of the AttachmentProvider.java in AOSP Mail to ensure that certain values are integers.

Recommendations For AOSP Mail versions 4.x through 4.4.3, update to version 4.4.4 or later. For AOSP Mail versions 5.0.x through 5.0.1, update to version 5.0.2 or later. For AOSP Mail versions 5.1.x through 5.1.0, update to version 5.1.1 or later. For AOSP Mail versions 6.x before 2016-10-01, update to a version released on or after 2016-10-01. For AOSP Mail versions 7.0 before 2016-10-01, update to a version released on or after 2016-10-01.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2016-3918

Affected Products

Aosp Mail

References · 5

• https://android.googlesource.com/platform/packages/apps/Email/+/6b2b0bd7c771c698f11d7be89c2c57c8722c7454 · Patch
• http://source.android.com/security/bulletin/2016-10-01.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2016-3918 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2016-3918 · Security Note
• http://securityfocus.com/bid/93299 · Note