PT-2018-4357

CVE-2015-2003

Published

2018-03-29

Updated

2018-04-23

Description by

CVSS 2.0

7.5

High

MetricsAV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions PJSUA2 SDK versions prior to SVN Changeset 51322 for Android

Description The issue allows attackers to execute arbitrary code by leveraging a finalize method in a Serializable class. This method improperly passes an attacker-controlled pointer to a native function, potentially leading to code execution.

Recommendations For versions prior to SVN Changeset 51322, update to a version that includes the fix for this issue to prevent potential code execution attacks.

Exploitability

Fix

Researchers

Vendors

Affected products

Weakness enumeration

CWE-118: Incorrect Access of Indexable Resource (\'Range Error\')

Related identifiers