PT-2017-6242

CVE-2014-8571

·

Publicado

2017-04-02

·

Atualizado

2017-04-05

Descrição por

CVSS 2.0
4.3
Média
MétricasAV:N/AC:M/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions Huawei Ascend P6 mobile phones with software EDGE-U00 versions V100R001C17B508SP01 and earlier Huawei Ascend P6 mobile phones with software EDGE-T00 versions V100R001C01B508SP01 and earlier Huawei Ascend P6 mobile phones with software EDGE-C00 versions V100R001C92B508SP02 and earlier
Description The issue allows apps to capture screens without requiring root permission, potentially leading to user information leakage by malware.
Recommendations For EDGE-U00 versions V100R001C17B508SP01 and earlier, update to version V100R001C17B508SP02 or later. For EDGE-T00 versions V100R001C01B508SP01 and earlier, update to version V100R001C01B508SP02 or later. For EDGE-C00 versions V100R001C92B508SP02 and earlier, update to version V100R001C92B508SP03 or later.
Explorabilidade
Correção
Pesquisadores
Fornecedores
Produtos afetados
Enumeração de fraquezas
CWE-264
Identificadores relacionados
CVE-2014-8571
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com