Design/Logic Flaw

2018-05-0215:29:00

PRIOn knowledge base

www.prio-n.com

7 High

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

59.3%

JSON

The NotificationBroadcastReceiver class in the com.android.phone process in Google Android 4.1.1 through 4.4.2 allows attackers to bypass intended access restrictions and consequently make phone calls to arbitrary numbers, send mmi or ussd codes, or hangup ongoing calls via a crafted application.

CPENameOperatorVersion
androidge4.1.1
androidle4.4.2

CPE	Name	Operator	Version
	android	ge	4.1.1
	android	le	4.4.2

References

packetstormsecurity.com/files/127359/Android-OS-Authorization-Missing.html

seclists.org/fulldisclosure/2014/Jul/13

www.securityfocus.com/bid/68415

curesec.com/blog/article/blog/35.html

exchange.xforce.ibmcloud.com/vulnerabilities/94423