Google Android System Component Multiple Security Vulnerabilities
BID:103253
CVE-2017-13255 | CVE-2017-13256 | CVE-2017-13257 | CVE-2017-13258 | CVE-2017-13259 | CVE-2017-13260 | CVE-2017-13261 | CVE-2017-13262 | CVE-2017-13266 | CVE-2017-13272 |Info
Google Android System Component Multiple Security Vulnerabilities
| Bugtraq ID: | 103253 |
| Class: | Unknown |
| CVE: |
CVE-2017-13255 CVE-2017-13256 CVE-2017-13272 CVE-2017-13266 CVE-2017-13257 CVE-2017-13258 CVE-2017-13259 CVE-2017-13260 CVE-2017-13261 CVE-2017-13262 |
| Remote: | Yes |
| Local: | No |
| Published: | Mar 05 2018 12:00AM |
| Updated: | Mar 05 2018 12:00AM |
| Credit: | Jianjun Dai (@Jioun_dai) and Guang Gong of Alpha Team, Qihoo 360 Technology Co. Ltd, Wish Wu of Ant-financial Light-Year Security Lab, Yaoguang Chen of Ant-financial Light-Year Security Lab, Julian Rauchberger, Pengfei Ding, Chenfu Bao, Lenx Wei of Baidu X |
| Vulnerable: |
Google Pixel XL 0 Google Pixel C 0 Google Pixel 2 XL 0 Google Pixel 2 0 Google Pixel 0 Google Nexus 9 Google Nexus 7 Google Nexus 6P Google Nexus 6 Google Nexus 5X Google Nexus 4 Google Nexus 10 Google Android 7.1.1 Google Android 6.0.1 Google Android 5.1.1 Google Android 8.1 Google Android 8.0 Google Android 7.1.2 Google Android 7.0 Google Android 6.0 |
| Not Vulnerable: | |
Discussion
Google Android System Component Multiple Security Vulnerabilities
Google Android is prone to the following multiple security vulnerabilities:
1. Multiple remote-code execution vulnerabilities
2. Multiple information-disclosure vulnerabilities
An attacker can exploit these issues to gain access to sensitive information or to execute arbitrary code in the context of the affected application.
The issues are being tracked by Android IDs A-68776054, A-68817966, A-67110137, A-69478941, A-67110692, A-67863755, A-68161546, A-69177251, A-69177292, and A-69271284.
Google Android is prone to the following multiple security vulnerabilities:
1. Multiple remote-code execution vulnerabilities
2. Multiple information-disclosure vulnerabilities
An attacker can exploit these issues to gain access to sensitive information or to execute arbitrary code in the context of the affected application.
The issues are being tracked by Android IDs A-68776054, A-68817966, A-67110137, A-69478941, A-67110692, A-67863755, A-68161546, A-69177251, A-69177292, and A-69271284.
Exploit / POC
Google Android System Component Multiple Security Vulnerabilities
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Google Android System Component Multiple Security Vulnerabilities
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Google Android System Component Multiple Security Vulnerabilities
References:
References:
- Android Homepage (Google)
- Android Security Bulletin�??March 2018 (Google)