Google Android Media Framework Denial of Service and Information Disclosure Vulnerabilities

Bugtraq ID:	102522
Class:	Unknown
CVE:	CVE-2017-13185
Remote:	Yes
Local:	No
Published:	Jan 01 2018 12:00AM
Updated:	Jan 01 2018 12:00AM
Credit:	Zinuo Han of Chengdu Security Response Center, Qihoo 360 Technology Co. Ltd.
Vulnerable:	Google Android 7.1.1 Google Android 6.0.1 Google Android 5.1.1 Google Android 8.0 Google Android 7.1.2 Google Android 7.0 Google Android 6.0
Not Vulnerable:

Google Android Media Framework Denial of Service and Information Disclosure Vulnerabilities

Google Android is prone to remote denial-of-service and information-disclosure vulnerabilities.

Successful exploits may allow an attacker to gain access to sensitive information or cause denial-of-service conditions; other attacks are also possible.

These issues are being tracked by Android Bug ID A-65123471.

Google Android Media Framework Denial of Service and Information Disclosure Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Google Android Media Framework Denial of Service and Information Disclosure Vulnerabilities

References:

• Android Homepage (Google)
  
• Pixel?/?Nexus Security Bulletin�??January 2018 (Android)