PT-2017-10558 · Google · Android+1

Frank Liberato · Published 2017-02-08 · Updated 2019-10-03 · CVE-2017-0409

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Android versions 6.0 through 7.1.1

Description A remote code execution issue in the libstagefright library could allow an attacker to execute arbitrary code in the context of an unprivileged process by using a specially crafted file. This issue is considered High risk due to the possibility of remote code execution in applications that use this library.

Recommendations For Android versions 6.0 through 7.1.1, update to a version that includes the fix for this issue to prevent remote code execution.

Fix

Related Identifiers

CVE-2017-0409

Affected Products

Android

Libstagefright

References · 8

• https://cve.org/CVERecord?id=CVE-2017-0409 · Security Note
• https://osv.dev/vulnerability/CVE-2017-0409 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-0409 · Security Note
• https://ubuntu.com/security/CVE-2017-0409 · Vendor Advisory
• https://source.android.com/security/bulletin/2017-02-01.html · Vendor Advisory
• https://osv.dev/vulnerability/UBUNTU-CVE-2017-0409 · Vendor Advisory
• http://securityfocus.com/bid/96091 · Note
• http://securitytracker.com/id/1037798 · Note