exploitDog

CVE-2015-1527

Опубликовано: 15 сент. 2017

Источник: nvd

CVSS3: 7.8

CVSS2: 4.6

EPSS Низкий

Описание

Integer overflow in IAudioPolicyService.cpp in Android allows local users to gain privileges via a crafted application, aka Android Bug ID 19261727.

Ссылки

http://www.securityfocus.com/bid/76665
Third Party Advisory
VDB Entry
https://android.googlesource.com/platform/frameworks/av/+/6dc6c38%5E%21/
Patch
Vendor Advisory
https://www.blackhat.com/docs/us-15/materials/us-15-Gong-Fuzzing-Android-System-Services-By-Binder-Call-To-Escalate-Privilege.pdf
Exploit
Technical Description
Third Party Advisory
http://www.securityfocus.com/bid/76665
Third Party Advisory
VDB Entry
https://android.googlesource.com/platform/frameworks/av/+/6dc6c38%5E%21/
Patch
Vendor Advisory
https://www.blackhat.com/docs/us-15/materials/us-15-Gong-Fuzzing-Android-System-Services-By-Binder-Call-To-Escalate-Privilege.pdf
Exploit
Technical Description
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:google:android:-:*:*:*:*:*:*:*

EPSS

Процентиль: 8%

0.00029

Низкий

7.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-190

Связанные уязвимости

GHSA-7vmf-9pjv-j2fr

CVSS3: 7.8

github

больше 3 лет назад

Integer overflow in IAudioPolicyService.cpp in Android allows local users to gain privileges via a crafted application, aka Android Bug ID 19261727.

EPSS

Процентиль: 8%

0.00029

Низкий

7.8 High

CVSS3

4.6 Medium

CVSS2

Дефекты

CWE-190