PT-2017-1816 · Google · Android

Laginimaineb · Published 2017-04-13 · Updated 2018-08-13 · CVE-2014-7920

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Android mediaserver versions 2.2 through 5.x before 5.1

Description The issue is related to insufficient access control in the mediaserver component of the Android operating system. It allows a remote attacker to potentially gain elevated privileges.

Recommendations For Android mediaserver versions 2.2 through 5.x before 5.1, update to version 5.1 or later to resolve the issue.

Exploit

Fix

Weakness Enumeration

CWE-264

Related Identifiers

BDU:2017-00972

CVE-2014-7920

Affected Products

Android

References · 6

• 🔥 https://github.com/laginimaineb/cve-2014-7920-7921 · Exploit
• 🔥 https://github.com/Vinc3nt4H/cve-2014-7920-7921_update · Exploit
• https://bdu.fstec.ru/vul/2017-00972 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2014-7920 · Security Note
• https://android.googlesource.com/platform/frameworks/av/+/36d1577%5E%21 · Note
• https://bits-please.blogspot.com/2016/01/android-privilege-escalation-to.html · Note