Design/Logic Flaw

2020-01-2213:15:00

PRIOn knowledge base

www.prio-n.com

4.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

39.4%

JSON

The SoundServer/FocusServer system services in Tizen allow an unprivileged process to perform media-related system actions, due to improper D-Bus security policy configurations. Such actions include playing an arbitrary sound file or DTMF tones. This affects Tizen before 5.0 M1, and Tizen-based firmwares including Samsung Galaxy Gear series before build RE2.

CPENameOperatorVersion
tizeneq1.0 m1
tizeneq1.0
tizeneq2.0
tizeneq2.1
tizeneq2.2
tizeneq2.2.1
tizeneq2.3
tizeneq2.3.1
tizeneq2.4
tizeneq3.0 m2

Name	Operator	Version
tizen	eq	1.0 m1
tizen	eq	1.0
tizen	eq	2.0
tizen	eq	2.1
tizen	eq	2.2
tizen	eq	2.2.1
tizen	eq	2.3
tizen	eq	2.3.1
tizen	eq	2.4
tizen	eq	3.0 m2

Rows per page:

1-10 of 161

References

media.defcon.org/DEF%20CON%2026/DEF%20CON%2026%20presentations/Dongsung%20Kim%20and%20Hyoung%20Kee%20Choi%20-%20Updated/DEFCON-26-Dongsung-Kim-and-Hyoung-Kee-Choi-Your-Watch-Can-Watch-You-Updated.pdf

review.tizen.org/git/?p=platform/core/multimedia/libmm-sound.git;a=commit;h=7fce6f2d6d480b3bd0e84a5ba3f72173a37e36db

www.youtube.com/watch?v=3IdgBwbOT-g&feature=youtu.be