CVE-2011-1352

Опубликовано: 05 фев. 2013

Источник: nvd

CVSS2: 6.9

EPSS Низкий

Описание

The PowerVR SGX driver in Android before 2.3.6 allows attackers to gain root privileges via an application that triggers kernel memory corruption using crafted user data to the pvrsrvkm device.

Ссылки

http://code.google.com/p/android/issues/detail?id=21523
Vendor Advisory
http://jon.oberheide.org/files/levitator.c
Exploit
http://code.google.com/p/android/issues/detail?id=21523
Vendor Advisory
http://jon.oberheide.org/files/levitator.c
Exploit

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:google:android:*:*:*:*:*:*:*:*

Версия до 2.3.5 (включая)

cpe:2.3:o:google:android:1.0:*:*:*:*:*:*:*

cpe:2.3:o:google:android:1.1:*:*:*:*:*:*:*

cpe:2.3:o:google:android:1.5:*:*:*:*:*:*:*

cpe:2.3:o:google:android:1.6:*:*:*:*:*:*:*

cpe:2.3:o:google:android:2.0:*:*:*:*:*:*:*

cpe:2.3:o:google:android:2.0.1:*:*:*:*:*:*:*

cpe:2.3:o:google:android:2.1:*:*:*:*:*:*:*

cpe:2.3:o:google:android:2.2:*:*:*:*:*:*:*

cpe:2.3:o:google:android:2.2.1:*:*:*:*:*:*:*

cpe:2.3:o:google:android:2.2.2:*:*:*:*:*:*:*

cpe:2.3:o:google:android:2.2.3:*:*:*:*:*:*:*

cpe:2.3:o:google:android:2.3:*:*:*:*:*:*:*

cpe:2.3:o:google:android:2.3.1:*:*:*:*:*:*:*

cpe:2.3:o:google:android:2.3.2:*:*:*:*:*:*:*

cpe:2.3:o:google:android:2.3.3:*:*:*:*:*:*:*

cpe:2.3:o:google:android:2.3.4:*:*:*:*:*:*:*

EPSS

Процентиль: 5%

0.00021

Низкий

6.9 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

CVE-2011-1352

ubuntu

почти 13 лет назад

The PowerVR SGX driver in Android before 2.3.6 allows attackers to gain root privileges via an application that triggers kernel memory corruption using crafted user data to the pvrsrvkm device.

GHSA-gm7f-v33r-q3v9

github

больше 3 лет назад

The PowerVR SGX driver in Android before 2.3.6 allows attackers to gain root privileges via an application that triggers kernel memory corruption using crafted user data to the pvrsrvkm device.

EPSS

Процентиль: 5%

0.00021

Низкий

6.9 Medium

CVSS2

Дефекты

CWE-119