Lucene search

K

10 matches found

CVE
CVE
added 2010/09/10 7:0 p.m.160 views

CVE-2010-1807

WebKit in Apple Safari 4.x before 4.1.2 and 5.x before 5.0.2; Android before 2.2; and webkitgtk before 1.2.6; does not properly validate floating-point data, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted HTML document, related...

9.3CVSS8.9AI score0.80553EPSS
CVE
CVE
added 2009/08/03 6:30 p.m.54 views

CVE-2009-2656

Unspecified vulnerability in the com.android.phone process in Android 1.0, 1.1, and 1.5 allows remote attackers to cause a denial of service (network disconnection) via a crafted SMS message, as demonstrated by Collin Mulliner and Charlie Miller at Black Hat USA 2009.

5CVSS6.5AI score0.01192EPSS
CVE
CVE
added 2012/10/07 3:55 p.m.53 views

CVE-2011-3918

The Zygote process in Android 4.0.3 and earlier accepts fork requests from processes with arbitrary UIDs, which allows remote attackers to cause a denial of service (reboot loop) via a crafted application.

7.8CVSS6.7AI score0.10066EPSS
CVE
CVE
added 2014/05/14 12:55 a.m.52 views

CVE-2010-4832

Android OS before 2.2 does not display the correct SSL certificate in certain cases, which might allow remote attackers to spoof trusted web sites via a web page containing references to external sources in which (1) the certificate of the last loaded resource is checked, instead of for the main pa...

4.3CVSS6.7AI score0.00187EPSS
CVE
CVE
added 2013/02/05 3:55 p.m.51 views

CVE-2011-1350

The PowerVR SGX driver in Android before 2.3.6 allows attackers to obtain potentially sensitive information from kernel stack memory via an application that uses a crafted length parameter in a request to the pvrsrvkm device.

7.1CVSS5.8AI score0.04051EPSS
CVE
CVE
added 2014/04/29 8:55 p.m.44 views

CVE-2013-7373

Android before 4.4 does not properly arrange for seeding of the OpenSSL PRNG, which makes it easier for attackers to defeat cryptographic protection mechanisms by leveraging use of the PRNG within multiple applications.

7.5CVSS6.7AI score0.00228EPSS
CVE
CVE
added 2014/12/15 6:59 p.m.41 views

CVE-2014-7911

luni/src/main/java/java/io/ObjectInputStream.java in the java.io.ObjectInputStream implementation in Android before 5.0.0 does not verify that deserialization will result in an object that met the requirements for serialization, which allows attackers to execute arbitrary code via a crafted finaliz...

7.2CVSS7AI score0.83885EPSS
CVE
CVE
added 2013/02/05 3:55 p.m.39 views

CVE-2011-1352

The PowerVR SGX driver in Android before 2.3.6 allows attackers to gain root privileges via an application that triggers kernel memory corruption using crafted user data to the pvrsrvkm device.

6.9CVSS6.9AI score0.0002EPSS
CVE
CVE
added 2014/12/15 6:59 p.m.39 views

CVE-2014-8507

Multiple SQL injection vulnerabilities in the queryLastApp method in packages/WAPPushManager/src/com/android/smspush/WapPushManager.java in the WAPPushManager module in Android before 5.0.0 allow remote attackers to execute arbitrary SQL commands, and consequently launch an activity or service, via...

7.5CVSS8.5AI score0.03404EPSS
CVE
CVE
added 2014/12/15 6:59 p.m.35 views

CVE-2014-8610

AndroidManifest.xml in Android before 5.0.0 does not require the SEND_SMS permission for the SmsReceiver receiver, which allows attackers to send stored SMS messages, and consequently transmit arbitrary new draft SMS messages or trigger additional per-message charges from a network operator for old...

3.3CVSS6.6AI score0.00061EPSS