CVE-2015-7888

CVE-2015-7888 affects Samsung Galaxy S6 Edge WifiHs20UtilityService. A directory traversal occurs when a cred.zip is placed under /sdcard/Download; the unzipping process can write files to arbitrary locations (e.g., /data/bundle) as the system user due to unverified file paths. Project Zero notes...

CVE-2015-7888

Directory traversal vulnerability in the WifiHs20UtilityService on the Samsung S6 Edge LRX22G.G925VVRU1AOE2 allows remote attackers to overwrite or create arbitrary files as the system-level user via a .. dot dot in the name of a file, compressed into a zipped file named cred.zip, and downloaded ...