Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

ubuntu логотип

CVE-2016-3861

Опубликовано: 11 сент. 2016
Источник: ubuntu
Приоритет: medium
CVSS2: 9.3
CVSS3: 7.8

Описание

LibUtils in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 mishandles conversions between Unicode character encodings with different encoding widths, which allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow) via a crafted file, aka internal bug 29250543.

РелизСтатусПримечание
artful

DNE

bionic

DNE

cosmic

DNE

devel

DNE

disco

DNE

eoan

DNE

esm-apps/xenial

ignored

abandoned
esm-infra-legacy/trusty

DNE

trusty/esm was DNE [trusty was ignored [abandoned]]
esm-infra/focal

DNE

focal

DNE

Показывать по

РелизСтатусПримечание
artful

ignored

end of life
bionic

not-affected

1:7.0.0+r1-4
cosmic

not-affected

1:7.0.0+r1-4
disco

not-affected

1:7.0.0+r1-4
eoan

not-affected

1:7.0.0+r1-4
esm-apps/bionic

not-affected

1:7.0.0+r1-4
esm-apps/focal

not-affected

1:7.0.0+r1-4
esm-apps/jammy

not-affected

1:7.0.0+r1-4
esm-apps/xenial

ignored

esm-infra-legacy/trusty

DNE

Показывать по

9.3 Critical

CVSS2

7.8 High

CVSS3

Связанные уязвимости

CVSS3: 7.8
nvd
больше 9 лет назад

LibUtils in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 mishandles conversions between Unicode character encodings with different encoding widths, which allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow) via a crafted file, aka internal bug 29250543.

CVSS3: 7.8
debian
больше 9 лет назад

LibUtils in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before ...

CVSS3: 7.8
github
больше 3 лет назад

LibUtils in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-09-01, and 7.0 before 2016-09-01 mishandles conversions between Unicode character encodings with different encoding widths, which allows remote attackers to execute arbitrary code or cause a denial of service (heap-based buffer overflow) via a crafted file, aka internal bug 29250543.

9.3 Critical

CVSS2

7.8 High

CVSS3