PT-2017-1426

CVE-2017-0494

·

Publicado

2017-03-08

·

Atualizado

2017-07-17

Descrição por

CVSS 3.1
5.5
Média
MétricasAV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions Android versions 6.0 through 7.1.1
Description The issue is related to an information disclosure problem in the AOSP Messaging component of the Android operating system, which is caused by a lack of protection for internal data. This could allow a remote attacker, using a specially crafted file, to access data beyond their permission levels. The problem is considered moderate because it could be used to access sensitive data without proper authorization.
Recommendations For Android versions 6.0 through 7.1.1, update to a version that includes the fix for this issue to prevent potential data access beyond permission levels.
Explorabilidade
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Identificadores relacionados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾