PT-2016-7070 · Google · Android

Michał Bednarski · Published 2016-11-25 · Updated 2019-05-30 · CVE-2016-6710

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Android versions 5.0.x through 5.0.1 Android versions 5.1.x through 5.1.0 Android versions 6.x before 2016-11-01 Android versions 7.0 before 2016-11-01

Description An information disclosure issue in the download manager could allow a local malicious application to bypass operating system protections, gaining access to isolated application data. This issue is rated as High.

Recommendations For Android versions 5.0.x through 5.0.1, update to version 5.0.2 or later. For Android versions 5.1.x through 5.1.0, update to version 5.1.1 or later. For Android versions 6.x before 2016-11-01, apply the 2016-11-01 security patch or later. For Android versions 7.0 before 2016-11-01, apply the 2016-11-01 security patch or later.

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2016-6710

Affected Products

Android

References · 7

• https://source.android.com/security/bulletin/2016-11-01.html · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2016-6710 · Vendor Advisory
• https://ubuntu.com/security/CVE-2016-6710 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2016-6710 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2016-6710 · Security Note
• https://osv.dev/vulnerability/CVE-2016-6710 · Vendor Advisory
• http://securityfocus.com/bid/94170 · Note