EUVD-2015-2133

Malware in sbrugna...

CVE-2015-2020

The MyScript SDK before 1.3 for Android might allow attackers to execute arbitrary code by leveraging a finalize method in a Serializable class that improperly passes an attacker-controlled pointer to a native function...

Code injection

The MyScript SDK before 1.3 for Android might allow attackers to execute arbitrary code by leveraging a finalize method in a Serializable class that improperly passes an attacker-controlled pointer to a native function...

CVE-2015-2020

The MyScript SDK before 1.3 for Android might allow attackers to execute arbitrary code by leveraging a finalize method in a Serializable class that improperly passes an attacker-controlled pointer to a native function...

CVE-2015-2020

MyScript SDK for Android prior to v1.3 is vulnerable: a finalize() method in a Serializable class improperly passes an attacker-controlled pointer to a native function, enabling arbitrary code execution. Affected product: MyScript SDK for Android (versions before 1.3). Root cause: deserialization...