CVE-2014-7954

Directory traversal vulnerability in the doSendObjectInfo method in frameworks/av/media/mtp/MtpServer.cpp in Android 4.4.4 allows physically proximate attackers with a direct connection to the target Android device to upload files outside of the sdcard via a .. dot dot in a name parameter of an M...

Directory traversal

Directory traversal vulnerability in the doSendObjectInfo method in frameworks/av/media/mtp/MtpServer.cpp in Android 4.4.4 allows physically proximate attackers with a direct connection to the target Android device to upload files outside of the sdcard via a .. dot dot in a name parameter of an M...

PT-2017-6118

Name of the Vulnerable Software and Affected Versions: Android version 4.4.4 Description: A directory traversal issue exists in the doSendObjectInfo method in frameworks/av/media/mtp/MtpServer.cpp, allowing physically proximate attackers with a direct connection to the target Android device to...

CVE-2014-7954: Improper Limitation of a Pathname to a Restricted Directory

Directory traversal vulnerability in the doSendObjectInfo method in frameworks/av/media/mtp/MtpServer.cpp in Android 4.4.4 allows physically proximate attackers with a direct connection to the target Android device to upload files outside of the sdcard via a .. dot dot in a name parameter of an M...