UBUNTU-CVE-2016-2412

include/core/SkPostConfig.h in Skia, as used in Systemserver in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-04-01, mishandles certain crashes, which allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or...

PT-2016-1720

Name of the Vulnerable Software and Affected Versions Android versions 4.x through 4.4.3 Android versions 5.0.x through 5.0.1 Android versions 5.1.x through 5.1.0 Android versions 6.x before 2016-04-01 Description The issue is related to the mishandling of certain crashes in the Skia library,...

Android System Server Module Elevation of Privilege Vulnerability

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, of which System Server is a system server. An elevation of privilege vulnerability exists in the System Server module of Android. A local attacker can exploit this vulnerability t...

Android Information Disclosure

The vulnerability of the System Server component in the Android operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain confidential information through a specially created application...

Android Privilege Escalation

The vulnerability of the System Server component in the Android operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to obtain confidential information or enhance their privileges through a specially...

Windows Code Execution

The vulnerability of the Windows operating system’s DNS server relates to the use of memory after it is freed. Exploiting this vulnerability allows a malicious actor to execute arbitrary code through specially crafted requests from a remote location...

Android System Server Information Disclosure Vulnerability

Android is a cell phone operating system based on the Linux open kernel. Versions of System Server prior to Android 6.0 2015-12-01 have a security vulnerability in their implementation, which can be exploited by a remote attacker to gain access to sensitive information and then elevate privileges...

Android System Server Information Disclosure Vulnerability (CNVD-2015-08051)

Android is a cell phone operating system based on the Linux open kernel. A security vulnerability exists in the implementation of System Server in versions prior to Android 6.0 2015-12-01, which can be exploited by a remote attacker to gain access to sensitive information via a constructed...

CVE-2015-6625

System Server in Android 6.0 before 2015-12-01 allows attackers to obtain sensitive information and consequently gain privileges via a crafted application, aka internal bug 23936840...

CVE-2015-6624

System Server in Android 6.0 before 2015-12-01 allows attackers to obtain sensitive information via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 23999740...

Code injection

System Server in Android 6.0 before 2015-12-01 allows attackers to obtain sensitive information via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 23999740...

CVE-2015-6625

CVE-2015-6625 describes an information-disclosure/privilege-escalation vulnerability in Android 6.0 System Server, where a crafted application can access sensitive data and potentially gain higher privileges. The connected sources corroborate that this issue affects Android 6.0 prior to the Decem...

CVE-2015-6624

CVE-2015-6624 affects Android 6.0 and earlier builds; System Server information disclosure allows a crafted application to obtain sensitive permissions (Signature or SignatureOrSystem). The vulnerability is described as a local information-disclosure in System Server, enabling access to restricte...

CVE-2015-6624

System Server in Android 6.0 before 2015-12-01 allows attackers to obtain sensitive information via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 23999740...

CVE-2015-6624

System Server in Android 6.0 before 2015-12-01 allows attackers to obtain sensitive information via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 23999740...

CVE-2015-6625

System Server in Android 6.0 before 2015-12-01 allows attackers to obtain sensitive information and consequently gain privileges via a crafted application, aka internal bug 23936840...

CVE-2015-6625

System Server in Android 6.0 before 2015-12-01 allows attackers to obtain sensitive information and consequently gain privileges via a crafted application, aka internal bug 23936840...

PT-2015-3165

Name of the Vulnerable Software and Affected Versions Android versions prior to 2015-12-01 Description The issue is related to the System Server component in the Android operating system, which lacks protection for internal data. This allows an attacker to obtain sensitive information via a craft...

CVE-2015-6624: Exposure of Sensitive Information to an Unauthorized Actor

System Server in Android 6.0 before 2015-12-01 allows attackers to obtain sensitive information via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 23999740...

CVE-2015-6625: Exposure of Sensitive Information to an Unauthorized Actor

System Server in Android 6.0 before 2015-12-01 allows attackers to obtain sensitive information and consequently gain privileges via a crafted application, aka internal bug 23936840...