One class to rule them all

🗓️ 01 Jun 2015 00:00:00Reported by Or Peles and Roee Hay {orpeles,roeeh}@il.ibm.comType

android🔗 www.androidvulnerabilities.org👁 25 Views

This vulnerability allows arbitrary code execution in system_server process, replacing apps or changing SELinux policy, and gaining kernel code execution in some devices. Patched in Android 4.4 / 5.x / M and Google Play Services

Reporter	Title	Published	Views	Family All 14
ATTACKERKB	CVE-2015-3825	18 Feb 201623:59	–	attackerkb
Android Security Bulletins	Nexus Security Bulletin—August 2015Stay organized with collectionsSave and categorize content based on your preferences.	13 Aug 201500:00	–	androidsecurity
CNVD	Android Arbitrary Code Execution Vulnerability (CNVD-2015-06577)	4 Oct 201500:00	–	cnvd
CVE	CVE-2015-3825	18 Feb 201623:00	–	cve
CVE	CVE-2015-3837	1 Oct 201500:00	–	cve
Cvelist	CVE-2015-3825	18 Feb 201623:00	–	cvelist
Cvelist	CVE-2015-3837	1 Oct 201500:00	–	cvelist
EUVD	EUVD-2015-3873	7 Oct 202500:30	–	euvd
NVD	CVE-2015-3825	18 Feb 201623:59	–	nvd
NVD	CVE-2015-3837	1 Oct 201500:59	–	nvd

Source	Link
web	www.web.nvd.nist.gov/view/vuln/detail
droid-life	www.droid-life.com/2015/08/05/android-5-1-1-lmy48i-factory-images-arrive-for-nexus-4-5-6-7-2013-9-and-10/
android	www.android.googlesource.com/platform/external/conscrypt/+/de55e62f6c7ecd57d0a91f2b497885c3bdc661d3
android	www.android.googlesource.com/platform/external/conscrypt/+/edf7055461e2d7fa18de5196dca80896a56e3540
android	www.android.googlesource.com/platform/external/conscrypt/+/8d57b9dbbd883422a0ff02083bfcf637b097e504
groups	www.groups.google.com/forum/message/raw
web	www.web.nvd.nist.gov/view/vuln/detail
usenix	www.usenix.org/system/files/conference/woot15/woot15-paper-peles.pdf

10 Aug 2015 00:00Current

3.7Low risk

Vulners AI Score3.7

EPSS0.01073