PT-2018-4199
CVE-2014-2312
·
Publicado
2018-03-26
·
Atualizado
2024-04-08
Descrição por
CVSS 2.0
6.6
MédiaMétricasAV:L/AC:L/Au:N/C:N/I:C/A:C
Name of the Vulnerable Software and Affected Versions
thermald (affected versions not specified)
Description
The issue allows local users to write to arbitrary files via a symlink attack on /tmp/thermald.pid, potentially leading to unauthorized data modification. This is due to a flaw in the main function in android main.cpp.
Recommendations
At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Impactos
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾