PT-2017-1894 · Google · Android

Published 2017-04-07 · Updated 2019-10-03 · CVE-2017-0544

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1

Description An elevation of privilege issue in the CameraBase component could allow a local malicious application to execute arbitrary code, rated as High due to local arbitrary code execution in a privileged process. The vulnerability is related to insufficient access control in the CameraBase component, which may allow an attacker to execute arbitrary code.

Recommendations For versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-672

CWE-264

Related Identifiers

BDU:2017-01054

CVE-2017-0544

Affected Products

Android

References · 6

• https://bdu.fstec.ru/vul/2017-01054 · Security Note
• https://source.android.com/security/bulletin/2017-04-01 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-0544 · Security Note
• https://osv.dev/vulnerability/CVE-2017-0544 · Vendor Advisory
• http://securityfocus.com/bid/97337 · Note
• http://securitytracker.com/id/1038201 · Note