Lucene search
K

137 matches found

UbuntuCve
UbuntuCve
added 2017/02/08 3:59 p.m.24 views

CVE-2017-0405

A remote code execution vulnerability in Surfaceflinger could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Surfaceflinge...

9.3CVSS7.6AI score0.01818EPSS
Exploits0References2
OSV
OSV
added 2017/02/08 3:59 p.m.1 views

CVE-2017-0405

A remote code execution vulnerability in Surfaceflinger could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Surfaceflinge...

7.8CVSS6.4AI score0.01818EPSS
Exploits0References3
Prion
Prion
added 2017/02/08 3:59 p.m.12 views

Remote code execution

A remote code execution vulnerability in Surfaceflinger could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Surfaceflinge...

9.3CVSS7.7AI score0.01818EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2017/02/08 3:59 p.m.0 views

UBUNTU-CVE-2017-0405

A remote code execution vulnerability in Surfaceflinger could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Surfaceflinge...

7.8CVSS7.7AI score0.01818EPSS
Exploits0References3
NVD
NVD
added 2017/02/08 3:59 p.m.19 views

CVE-2017-0405

A remote code execution vulnerability in Surfaceflinger could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Surfaceflinge...

9.3CVSS7.6AI score0.01818EPSS
Exploits0References3
Cvelist
Cvelist
added 2017/02/08 3:0 p.m.24 views

CVE-2017-0405

A remote code execution vulnerability in Surfaceflinger could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Surfaceflinge...

7.6AI score0.01818EPSS
Exploits0References3
CVE
CVE
added 2017/02/08 3:0 p.m.56 views

CVE-2017-0405

CVE-2017-0405 is a remote code execution vulnerability in Android’s SurfaceFlinger. The issue allows an attacker to trigger memory corruption by processing a specially crafted media file, within the SurfaceFlinger context. Affected products/versions stated in the documents are Android 7.0 and 7.1...

9.3CVSS7.6AI score0.01818EPSS
Exploits0References3Affected Software1
android
android
added 2017/02/01 12:0 a.m.24 views

CVE-2017-0405

A remote code execution vulnerability in Surfaceflinger could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Surfaceflinge...

9.3CVSS7.9AI score0.01818EPSS
Exploits0References4Affected Software1
BDU FSTEC
BDU FSTEC
added 2016/08/23 12:0 a.m.4 views

The vulnerability of the Android operating system, which allows a perpetrator to obtain confidential information

The vulnerability of the SurfaceFlinger service in the Android operating system is related to the lack of protection for service data. Exploiting this vulnerability allows a malicious actor to obtain confidential information through a specially created application associated with the default...

4.3CVSS6.2AI score0.00454EPSS
Exploits0References3Affected Software1
OSV
OSV
added 2016/08/05 8:59 p.m.1 views

CVE-2016-3836

The SurfaceFlinger service in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows attackers to obtain sensitive information via a crafted application, related to lack of a default constructor in include/ui/FrameStats.h, aka internal bug 28592402...

5.5CVSS7.3AI score0.00454EPSS
Exploits0References3
NVD
NVD
added 2016/08/05 8:59 p.m.18 views

CVE-2016-3836

The SurfaceFlinger service in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows attackers to obtain sensitive information via a crafted application, related to lack of a default constructor in include/ui/FrameStats.h, aka internal bug 28592402...

5.5CVSS5AI score0.00454EPSS
Exploits0References3
UbuntuCve
UbuntuCve
added 2016/08/05 8:59 p.m.25 views

CVE-2016-3836

The SurfaceFlinger service in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows attackers to obtain sensitive information via a crafted application, related to lack of a default constructor in include/ui/FrameStats.h, aka internal bug 28592402...

5.5CVSS6.5AI score0.00454EPSS
Exploits0References3
Prion
Prion
added 2016/08/05 8:59 p.m.13 views

Default credentials

The SurfaceFlinger service in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows attackers to obtain sensitive information via a crafted application, related to lack of a default constructor in include/ui/FrameStats.h, aka internal bug 28592402...

4.3CVSS6.4AI score0.00454EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2016/08/05 8:0 p.m.21 views

CVE-2016-3836

The SurfaceFlinger service in Android 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-08-01 allows attackers to obtain sensitive information via a crafted application, related to lack of a default constructor in include/ui/FrameStats.h, aka internal bug 28592402...

5.3AI score0.00454EPSS
Exploits0References3
CVE
CVE
added 2016/08/05 8:0 p.m.47 views

CVE-2016-3836

CVE-2016-3836 affects the Android SurfaceFlinger service. It is exploitable on Android 5.0.x prior to 5.0.2, 5.1.x prior to 5.1.1, and 6.x prior to 2016-08-01, allowing a crafted application to disclose sensitive information. The root cause noted is a lack of a default constructor in include/ui/F...

5.5CVSS5.5AI score0.00454EPSS
Exploits0References3Affected Software1
CNVD
CNVD
added 2016/08/05 12:0 a.m.0 views

Google Android SurfaceFlinger Information Disclosure Vulnerability

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium. A security vulnerability exists in Android SurfaceFlinger, which can be exploited by a remote attacker to build a special application and trick the application into parsing and accessi...

5.5CVSS6.8AI score0.00454EPSS
Exploits0References1
myhack58
myhack58
added 2016/05/11 12:0 a.m.57 views

From 0 to TrustZone in the second article: the QSEE mention the right vulnerability and the use of CVE-2 0 1 5-6 6 3 9-a vulnerability warning-the black bar safety net

! In this article, we discuss how to find and exploit a vulnerability, access to Qualcomm secure execution environmentQSEEof the code execute permissions. Related reading From 0 to TrustZone first article: explore the high-pass SEE safe executable environment QSEE attack surface In a previous...

0.3AI score
Exploits0
Rows per page
Query Builder