Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

nvd логотип

CVE-2016-6723

Опубликовано: 25 нояб. 2016
Источник: nvd
CVSS3: 4.7
CVSS2: 5.4
EPSS Низкий

Описание

A denial of service vulnerability in Proxy Auto Config in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-11-01, and 7.0 before 2016-11-01 could enable a remote attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as Moderate because it requires an uncommon device configuration. Android ID: A-30100884.

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:o:google:android:*:*:*:*:*:*:*:*
Версия от 4.0 (включая) до 4.4.4 (исключая)
cpe:2.3:o:google:android:*:*:*:*:*:*:*:*
Версия от 5.0 (включая) до 5.0.2 (исключая)
cpe:2.3:o:google:android:*:*:*:*:*:*:*:*
Версия от 5.1 (включая) до 5.1.1 (исключая)
cpe:2.3:o:google:android:*:*:*:*:*:*:*:*
Версия от 6.0 (включая) до 6.0.1 (включая)
cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*

EPSS

Процентиль: 59%
0.00377
Низкий

4.7 Medium

CVSS3

5.4 Medium

CVSS2

Дефекты

CWE-284

Связанные уязвимости

CVSS3: 4.7
ubuntu
около 9 лет назад

A denial of service vulnerability in Proxy Auto Config in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-11-01, and 7.0 before 2016-11-01 could enable a remote attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as Moderate because it requires an uncommon device configuration. Android ID: A-30100884.

CVSS3: 4.7
github
больше 3 лет назад

A denial of service vulnerability in Proxy Auto Config in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-11-01, and 7.0 before 2016-11-01 could enable a remote attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as Moderate because it requires an uncommon device configuration. Android ID: A-30100884.

EPSS

Процентиль: 59%
0.00377
Низкий

4.7 Medium

CVSS3

5.4 Medium

CVSS2

Дефекты

CWE-284