PT-2015-3331

CVE-2015-7292

·

Publicado

2015-09-07

·

Atualizado

2017-04-15

Descrição por

CVSS 2.0
10
Alta
MétricasAV:N/AC:L/Au:N/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions Amazon Fire OS versions prior to 2016-01-15
Description The issue is related to a stack-based buffer overflow in the havok write function. This can be exploited by sending a long string to the /dev/hv device, potentially causing a denial of service or other unspecified impacts.
Recommendations For Amazon Fire OS versions prior to 2016-01-15, update to a version released after 2016-01-15 to resolve the issue. As a temporary workaround, consider restricting access to the /dev/hv device to minimize the risk of exploitation.
Explorabilidade
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Identificadores relacionados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾