Lucene search

[email protected]CVE-2016-8761

HistoryApr 02, 2017 - 8:59 p.m.

CVE-2016-8761

2017-04-0220:59:01

CWE-119

[email protected]

web.nvd.nist.gov

cve-2016-8761

huawei

honor 6

video driver

stack overflow

vulnerability

system crash

privilege escalation

nvd

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.5%

JSON

Video driver in Huawei P9 phones with software versions before EVA-AL10C00B192 and Huawei Honor 6 phones with software versions before H60-L02_6.10.1 has a stack overflow vulnerability, which allows attackers to crash the system or escalate user privilege.

Affected configurations

NVD

Node

huaweip9_firmwareMatch-

AND

huaweip9Match-

Node

huaweip9_plus_firmwareMatch-

AND

huaweip9_plusMatch-

Node

huaweihonor_6_firmwareMatch-

AND

huaweihonor_6Match-

CPENameOperatorVersion
huawei:p9_firmwarehuawei p9 firmwareeq-

CPE	Name	Operator	Version
huawei:p9_firmware	huawei p9 firmware	eq	-

CNA Affected

[
  {
    "product": "P9,Honor 6 Versions before EVA-AL10C00B192,Versions before H60-L02_6.10.1",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "P9,Honor 6 Versions before EVA-AL10C00B192,Versions before H60-L02_6.10.1"
      }
    ]
  }
]

References

www.huawei.com/en/psirt/security-advisories/huawei-sa-20161012-01-smartphone-en

www.securityfocus.com/bid/93530

Social References

9.3 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

7.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.5%

JSON

Related for CVE-2016-8761

prion1 cvelist1 nvd1 huawei1