Lucene search
HistoryAug 03, 2009 - 6:30 p.m.
CVE-2009-2656
android
com.android.phone process
vulnerability
denial of service
crafted sms message
cve-2009-2656
6.7 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.002 Low
EPSS
Percentile
61.2%
Unspecified vulnerability in the com.android.phone process in Android 1.0, 1.1, and 1.5 allows remote attackers to cause a denial of service (network disconnection) via a crafted SMS message, as demonstrated by Collin Mulliner and Charlie Miller at Black Hat USA 2009.
| CPE | Name | Operator | Version |
|---|---|---|---|
| google:android | google android | eq | 1.0 |
| google:android | google android | eq | 1.5 |
| google:android | google android | eq | 1.1 |
Related
cvelist
cvelist
prion
prion
Security feature bypass
2009-08-03 18:30:00
Design/Logic Flaw
2009-10-14 10:30:00
Design/Logic Flaw
2009-10-14 10:30:00
cve
cve
CVE-2009-2999
2009-10-14 10:30:00
CVE-2009-3698
2009-10-14 10:30:00
6.7 Medium
AI Score
Confidence
Low
5 Medium
CVSS2
Access Vector
NETWORK
Access Complexity
LOW
Authentication
NONE
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:N/I:N/A:P
0.002 Low
EPSS
Percentile
61.2%
Related for CVE-2009-2656