PT-2016-1011

CVE-2015-6637

Publicado

2016-01-06

Atualizado

2016-12-07

Descrição por

CVSS 2.0

9.3

Alta

MétricasAV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Android versions prior to 5.1.1 LMY49F Android versions prior to 6.0 2016-01-01

Description The issue is related to the MediaTek misc-sd driver in Android, which has inadequate access control. This allows attackers to gain privileges via a crafted application.

Recommendations For Android versions prior to 5.1.1 LMY49F, update to version 5.1.1 LMY49F or later. For Android versions prior to 6.0 2016-01-01, update to version 6.0 2016-01-01 or later.

Explorabilidade

Exploit

Correção

Pesquisadores

Jfang

Nforest

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-264

Identificadores relacionados

CVE-2015-6637