PoC_CVE-2017-0807

CVE-2017-0807 的概念验证 这是一款针对 CVE-2017-0807 的演示应用，其界面被故意设计得非常粗糙。该漏洞由 Efthimios Alepis 和 Constantinos Patsakis 报告。 该漏洞表明，由于 Nougat 及之前所有 Android 版本均存在安全问题，无特权用户几乎可以在任何 Android 界面之上叠加覆盖层，诱骗用户提供输入。在演示中，我们覆盖了一个屏幕，使我们的应用成为设备的设备管理员；不过，利用此漏洞还有多种其他方式。与其他攻击（例如斗篷与匕首）不同，我们的攻击不会请求任何危险权限或系统权限，如 SYSTEM ALERT...

CVE-2017-0807

An elevation of privilege vulnerability in the Android framework ui framework. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2. Android ID: A-35056974...

CVE-2017-0807

CVE-2017-0807 is an Elevation of Privilege in the Android framework’s UI subsystem. Affected Android versions include 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, and 7.1.2 (Android ID: A-35056974). The reference materials indicate this issue resides in the Framework UI component and was addresse...

Pixel / Nexus Security Bulletin—October 2017Stay organized with collectionsSave and categorize content based on your preferences.

The Pixel/Nexus Security Bulletin contains details of security vulnerabilities and functional improvements affecting supported Google Pixel and Nexus devices Google devices. For Google devices, security patch levels of October 05, 2017 or later address all issues in this bulletin and all issues i...