Google Android CVE-2017-0782 Remote Code Execution Vulnerability

Bugtraq ID:	100822
Class:	Unknown
CVE:	CVE-2017-0782
Remote:	Yes
Local:	No
Published:	Sep 12 2017 12:00AM
Updated:	Sep 12 2017 12:00AM
Credit:	Ben Seri and Gregory Vishnepolsky of Armis.
Vulnerable:	Google Pixel XL 0 Google Pixel C 0 Google Pixel 0 Google Nexus 9 Google Nexus 6P Google Nexus 6 Google Nexus 5X Google Android 7.1.1 Google Android 6.0.1 Google Android 5.1.1 Google Android 5.0.2 Google Android 4.4.4 Google Android 8.0 Google Android 7.1.2 Google Android 7.0 Google Android 6.0
Not Vulnerable:

Google Android CVE-2017-0782 Remote Code Execution Vulnerability

Google Android is prone to a remote code execution vulnerability.

An attacker can exploit this issue to execute arbitrary code within the context of a privileged process. Failed exploits may result in denial-of-service conditions.

This issue is being tracked by Android Bug ID A-63146237.

Google Android CVE-2017-0782 Remote Code Execution Vulnerability

Researchers who discovered this issue have created a proof-of-concept. Please see the references for more information.

Google Android CVE-2017-0782 Remote Code Execution Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Google Android CVE-2017-0782 Remote Code Execution Vulnerability

References:

• Android Homepage (Google)
  
• The IoT Attack Vector �??BlueBorne�?� Exposes Almost Every Connected Device (Armis)
  
• Android Security Bulletin�??September 2017 (Google)
  
• VU#240311 Multiple Bluetooth implementation vulnerabilities affect many devices (CERT)