CVE-2015-3849 Detail
Current Description
The Region_createFromParcel function in core/jni/android/graphics/Region.cpp in Region in Android before 5.1.1 LMY48M does not check the return values of certain read operations, which allows attackers to execute arbitrary code via an application that sends a crafted message to a service, aka internal bug 21585255.
Source:
MITRE
View Analysis Description
Analysis Description
The Region_createFromParcel function in core/jni/android/graphics/Region.cpp in Region in Android before 5.1.1 LMY48M does not check the return values of certain read operations, which allows attackers to execute arbitrary code via an application that sends a crafted message to a service, aka internal bug 21585255.
Source:
MITRE
Impact
CVSS v2.0 Severity and Metrics:
Base Score:
9.3 HIGH
Vector:
(AV:N/AC:M/Au:N/C:C/I:C/A:C)
(V2 legend)
Impact Subscore:
10.0
Exploitability Subscore:
8.6
Access Vector (AV):
Network
Access Complexity (AC):
Medium
Authentication (AU):
None
Confidentiality (C):
Complete
Integrity (I):
Complete
Availability (A):
Complete
Additional Information:
Victim must voluntarily interact with attack mechanism
Allows unauthorized disclosure of information
Allows unauthorized modification
Allows disruption of service
References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because
they may have information that would be of interest to you. No inferences should be drawn on account of other sites
being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose.
NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further,
NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about
this page to nvd@nist.gov.
Technical Details
Vulnerability Type
(View All)
- Permissions, Privileges, and Access Controls (CWE-264)
Change History
3 change records found
- show changes
CVE Translated -
10/3/2015 2:45:12 AM
| Action |
Type |
Old Value |
New Value |
| Added |
Translation |
|
La función Region_createFromParcel en core/jni/android/graphics/Region.cpp en Region en Android en versiones anteriores a 5.1.1 LMY48M no comprueba los valores de retorno de ciertas operaciones de lectura, lo que permite a atacantes ejecutar código arbitrario a través de una aplicación que envía un mensaje manipulado a un servicio, también conocido como error interno 21585255. |
| Removed |
Translation |
Vulnerabilidad en la función Region_createFromParcel en core/jni/android/graphics/Region.cpp en Region en Android en versiones anteriores a 5.1.1 LMY48M, no comprueba los valores de retorno de ciertas operaciones de lectura, lo que permite a atacantes ejecutar código arbitrario a través de una aplicación que envía un mensaje manipulado a un servicio, también conocida como error interno 21585255. |
|
Modified Analysis -
10/1/2015 2:07:36 PM
| Action |
Type |
Old Value |
New Value |
| Added |
CPE Configuration |
|
Configuration 1
OR
*cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:* (and previous) |
| Added |
CVSS V2 |
|
(AV:N/AC:M/Au:N/C:C/I:C/A:C) |
| Added |
CWE |
|
CWE-264 |
| Changed |
Reference Type |
https://android.googlesource.com/platform/frameworks/base/+/1e72dc7a3074cd0b44d89afbf39bbf5000ef7cc3 No Types Assigned |
https://android.googlesource.com/platform/frameworks/base/+/1e72dc7a3074cd0b44d89afbf39bbf5000ef7cc3 Advisory |
| Changed |
Reference Type |
https://android.googlesource.com/platform/frameworks/base/+/4cff1f49ff95d990d6c2614da5d5a23d02145885 No Types Assigned |
https://android.googlesource.com/platform/frameworks/base/+/4cff1f49ff95d990d6c2614da5d5a23d02145885 Advisory |
| Changed |
Reference Type |
https://groups.google.com/forum/message/raw?msg=android-security-updates/1M7qbSvACjo/Y7jewiW1AwAJ No Types Assigned |
https://groups.google.com/forum/message/raw?msg=android-security-updates/1M7qbSvACjo/Y7jewiW1AwAJ Advisory |
Initial CVE Analysis -
10/1/2015 11:25:32 AM
Quick Info
CVE Dictionary Entry:
CVE-2015-3849
NVD Published Date:
09/30/2015
NVD Last Modified:
10/01/2015
|