CVE-2016-8783

Опубликовано: 09 мар. 2018

Источник: nvd

CVSS3: 7.8

CVSS2: 9.3

EPSS Низкий

Описание

Touchscreen drive in Huawei H60 (Honor 6) Versions earlier than H60-L02_6.12.16 and P9 Plus Versions earlier than VIE-AL10BC00B356 has a stack overflow vulnerabilities. An attacker tricks a user into installing a malicious application on the smart phone, and send given parameter to touchscreen drive to crash the system or escalate privilege.

Ссылки

http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161215-01-smartphone-en
Vendor Advisory
http://www.securityfocus.com/bid/94944
Third Party Advisory
VDB Entry
http://www.huawei.com/en/psirt/security-advisories/huawei-sa-20161215-01-smartphone-en
Vendor Advisory
http://www.securityfocus.com/bid/94944
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одновременно

cpe:2.3:o:huawei:honor_6_firmware:*:*:*:*:*:*:*:*

Версия до h60-l02_6.12.16 (исключая)

cpe:2.3:h:huawei:honor_6:-:*:*:*:*:*:*:*

Конфигурация 2

Одновременно

cpe:2.3:o:huawei:p9_plus_firmware:*:*:*:*:*:*:*:*

Версия до vie-al10bc00b356 (исключая)

cpe:2.3:h:huawei:p9_plus:-:*:*:*:*:*:*:*

EPSS

Процентиль: 18%

0.00058

Низкий

7.8 High

CVSS3

9.3 Critical

CVSS2

Дефекты

CWE-119

Связанные уязвимости

GHSA-g426-8hcq-8h96