PT-2018-4357

CVE-2015-2003

Publicado

2018-03-29

Atualizado

2018-04-23

Descrição por

CVSS 2.0

7.5

Alta

MétricasAV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PJSUA2 SDK versions prior to SVN Changeset 51322 for Android

Description The issue allows attackers to execute arbitrary code by leveraging a finalize method in a Serializable class. This method improperly passes an attacker-controlled pointer to a native function, potentially leading to code execution.

Recommendations For versions prior to SVN Changeset 51322, update to a version that includes the fix for this issue to prevent potential code execution attacks.

Explorabilidade

Correção

Pesquisadores

Fornecedores

Produtos afetados

Enumeração de fraquezas

CWE-118: Incorrect Access of Indexable Resource (\'Range Error\')

Identificadores relacionados