PT-2017-6242

CVE-2014-8571

·

Published

2017-04-02

·

Updated

2017-04-05

Description by

CVSS 2.0
4.3
Medium
MetricsAV:N/AC:M/Au:N/C:P/I:N/A:N
Name of the Vulnerable Software and Affected Versions Huawei Ascend P6 mobile phones with software EDGE-U00 versions V100R001C17B508SP01 and earlier Huawei Ascend P6 mobile phones with software EDGE-T00 versions V100R001C01B508SP01 and earlier Huawei Ascend P6 mobile phones with software EDGE-C00 versions V100R001C92B508SP02 and earlier
Description The issue allows apps to capture screens without requiring root permission, potentially leading to user information leakage by malware.
Recommendations For EDGE-U00 versions V100R001C17B508SP01 and earlier, update to version V100R001C17B508SP02 or later. For EDGE-T00 versions V100R001C01B508SP01 and earlier, update to version V100R001C01B508SP02 or later. For EDGE-C00 versions V100R001C92B508SP02 and earlier, update to version V100R001C92B508SP03 or later.
Exploitability
Fix
Researchers
Vendors
Affected products
Weakness enumeration
CWE-264
Related identifiers
CVE-2014-8571
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com