Lucene search
Roee Hay (IBM)ANDROID:KEYSTORE_BUFFERHistoryJun 23, 2014 - 12:00 a.m.
keystore buffer
2014-06-2300:00:00
Roee Hay (IBM)
www.androidvulnerabilities.org
6
5.1 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
Stack-based buffer overflow in the encode_key function in /system/bin/keystore in the KeyStore service in Android 4.3 allows attackers to execute arbitrary code, and consequently obtain sensitive key information or bypass intended restrictions on cryptographic operations, via a long key name.
References
Related
prion
prion
Stack overflow
2014-07-02 04:14:00
securityvulns
securityvulns
Android KeyStore Stack Buffer Overflow (CVE-2014-3100)
2014-10-14 00:00:00
Android / MIUI multiple security vulnerabilities
2014-10-14 00:00:00
cvelist
cvelist
CVE-2014-3100
2014-07-02 01:00:00
cve
cve
CVE-2014-3100
2014-07-02 04:14:00
5.1 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
HIGH
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:H/Au:N/C:P/I:P/A:P
Related for ANDROID:KEYSTORE_BUFFER