PT-2017-1892

CVE-2017-0546

·

تاريخ النشر

2017-04-07

·

تاريخ التحديث

2019-10-03

الوصف من

CVSS 2.0
9.3
عالية
المقاييسAV:N/AC:M/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Android versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1
Description The issue is related to an elevation of privilege vulnerability in the SurfaceFlinger component of the Android operating system, which could enable a local malicious application to execute arbitrary code within the context of a privileged process. This vulnerability is rated as High because it could be used to gain local access to elevated capabilities. The vulnerability is also associated with insufficient access control, which could allow a remote attacker to execute arbitrary code.
Recommendations For versions 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
التأثيرات
المورّدون
المنتجات المتأثرة
تصنيف نقاط الضعف
المعرّفات ذات الصلة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾