CVE-2009-0606

The CVE-2009-0606 entry concerns Android 1.0 (Open Handset Alliance) on the T-Mobile G1, where the link_image function in linker/linker.c of Bionic’s dynamic linker mishandles file descriptors 0, 1, and 2 for a setgid program. This behavior could allow local users to create arbitrary files owned ...