CVE-2013-6272

Опубликовано: 02 мая 2018

Источник: nvd

CVSS3: 7.8

CVSS2: 6.8

EPSS Низкий

Описание

The NotificationBroadcastReceiver class in the com.android.phone process in Google Android 4.1.1 through 4.4.2 allows attackers to bypass intended access restrictions and consequently make phone calls to arbitrary numbers, send mmi or ussd codes, or hangup ongoing calls via a crafted application.

Ссылки

http://packetstormsecurity.com/files/127359/Android-OS-Authorization-Missing.html
Exploit
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2014/Jul/13
Exploit
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/68415
Third Party Advisory
VDB Entry
https://curesec.com/blog/article/blog/35.html
Exploit
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/94423
Third Party Advisory
VDB Entry
http://packetstormsecurity.com/files/127359/Android-OS-Authorization-Missing.html
Exploit
Third Party Advisory
VDB Entry
http://seclists.org/fulldisclosure/2014/Jul/13
Exploit
Mailing List
Third Party Advisory
http://www.securityfocus.com/bid/68415
Third Party Advisory
VDB Entry
https://curesec.com/blog/article/blog/35.html
Exploit
Third Party Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/94423
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:google:android:*:*:*:*:*:*:*:*

Версия от 4.1.1 (включая) до 4.4.2 (включая)

EPSS

Процентиль: 34%

0.00139

Низкий

7.8 High

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-284

Связанные уязвимости

GHSA-fcgr-c79j-5q35