Описание
The backup mechanism in the adb tool in Android might allow attackers to inject additional applications (APKs) and execute arbitrary code by leveraging failure to filter application data streams.
The backup mechanism in the adb tool in Android might allow attackers to inject additional applications (APKs) and execute arbitrary code by leveraging failure to filter application data streams.
Ссылки
- https://nvd.nist.gov/vuln/detail/CVE-2014-7952
- https://github.com/irsl/ADB-Backup-APK-Injection
- http://packetstormsecurity.com/files/132645/ADB-Backup-APK-Injection.html
- http://seclists.org/fulldisclosure/2015/Jul/46
- http://www.search-lab.hu/about-us/news/110-android-adb-backup-apk-injection-vulnerability
- http://www.securityfocus.com/archive/1/535980/100/0/threaded
- http://www.securityfocus.com/bid/75705
Связанные уязвимости
CVSS3: 7.8
nvd
около 8 лет назад
The backup mechanism in the adb tool in Android might allow attackers to inject additional applications (APKs) and execute arbitrary code by leveraging failure to filter application data streams.