MitreCVE-2014-8609CVE-2014-8609
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
AI Score
Confidence
Low
EPSS
Percentile
42.2%
The addAccount method in src/com/android/settings/accounts/AddAccountSettings.java in the Settings application in Android before 5.0.0 does not properly create a PendingIntent, which allows attackers to use the SYSTEM uid for broadcasting an intent with arbitrary component, action, or category information via a third-party authenticator in a crafted application, aka Bug 17356824.
Affected configurations
| Vendor | Product | Version | CPE |
|---|---|---|---|
| android | * | cpe:2.3:o:google:android:*:*:*:*:*:*:*:* | |
| android | 4.0 | cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:* | |
| android | 4.0.1 | cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:* | |
| android | 4.0.2 | cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:* | |
| android | 4.0.3 | cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:* | |
| android | 4.0.4 | cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:* | |
| android | 4.1 | cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:* | |
| android | 4.1.2 | cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:* | |
| android | 4.2 | cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:* | |
| android | 4.2.1 | cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:* |
Related
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
AI Score
Confidence
Low
EPSS
Percentile
42.2%