CVE-2015-7896

Опубликовано: 24 авг. 2017

Источник: nvd

CVSS3: 6.5

CVSS2: 4.3

EPSS Низкий

Описание

LibQJpeg in the Samsung Galaxy S6 before the October 2015 MR allows remote attackers to cause a denial of service (memory corruption and SIGSEGV) via a crafted image file.

Ссылки

http://packetstormsecurity.com/files/134198/Samsung-Galaxy-S6-LibQjpeg-DoIntegralUpsample-Crash.html
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/77425
Third Party Advisory
VDB Entry
https://bugs.chromium.org/p/project-zero/issues/detail?id=498&redir=1
Third Party Advisory
https://www.exploit-db.com/exploits/38612/
Third Party Advisory
VDB Entry
http://packetstormsecurity.com/files/134198/Samsung-Galaxy-S6-LibQjpeg-DoIntegralUpsample-Crash.html
Third Party Advisory
VDB Entry
http://www.securityfocus.com/bid/77425
Third Party Advisory
VDB Entry
https://bugs.chromium.org/p/project-zero/issues/detail?id=498&redir=1
Third Party Advisory
https://www.exploit-db.com/exploits/38612/
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одновременно

Одно из

cpe:2.3:o:samsung:samsung_mobile:5.0:*:*:*:*:*:*:*

cpe:2.3:o:samsung:samsung_mobile:5.0.1:*:*:*:*:*:*:*

cpe:2.3:o:samsung:samsung_mobile:5.0.2:*:*:*:*:*:*:*

cpe:2.3:o:samsung:samsung_mobile:5.1:*:*:*:*:*:*:*

cpe:2.3:o:samsung:samsung_mobile:5.1.1:*:*:*:*:*:*:*

cpe:2.3:o:samsung:samsung_mobile:6.0:*:*:*:*:*:*:*

cpe:2.3:o:samsung:samsung_mobile:6.0.1:*:*:*:*:*:*:*

cpe:2.3:o:samsung:samsung_mobile:7.0:*:*:*:*:*:*:*

cpe:2.3:o:samsung:samsung_mobile:7.1:*:*:*:*:*:*:*

cpe:2.3:o:samsung:samsung_mobile:7.1.1:*:*:*:*:*:*:*

cpe:2.3:o:samsung:samsung_mobile:7.1.2:*:*:*:*:*:*:*

cpe:2.3:h:samsung:galaxy_s6:-:*:*:*:*:*:*:*

EPSS

Процентиль: 91%

0.07163

Низкий

6.5 Medium

CVSS3

4.3 Medium

CVSS2

Дефекты

CWE-119

Связанные уязвимости

GHSA-j5r6-r9wj-mgmg