Open Handset Alliance Android Multiple Local Vulnerabilities
BID:33695
Info
Open Handset Alliance Android Multiple Local Vulnerabilities
| Bugtraq ID: | 33695 |
| Class: | Unknown |
| CVE: | |
| Remote: | No |
| Local: | Yes |
| Published: | Feb 09 2009 12:00AM |
| Updated: | Feb 11 2009 06:48PM |
| Credit: | Pavel Machek |
| Vulnerable: |
Open Handset Alliance Android 1.0 |
| Not Vulnerable: | |
Discussion
Open Handset Alliance Android Multiple Local Vulnerabilities
Open Handset Alliance Android (previously Google Android) is prone to multiple local vulnerabilities including a privilege-escalation issue, multiple integer-overflow issues, and a buffer-overflow issue.
Local attackers may be able to exploit these issues to gain elevated privileges on a vulnerable device or to execute arbitrary code within the context of the kernel. Failed attacks will likely cause denial-of-service conditions.
Android 1.0 as shipped with the T-Mobile G1 phone is vulnerable; other versions may also be affected.
Open Handset Alliance Android (previously Google Android) is prone to multiple local vulnerabilities including a privilege-escalation issue, multiple integer-overflow issues, and a buffer-overflow issue.
Local attackers may be able to exploit these issues to gain elevated privileges on a vulnerable device or to execute arbitrary code within the context of the kernel. Failed attacks will likely cause denial-of-service conditions.
Android 1.0 as shipped with the T-Mobile G1 phone is vulnerable; other versions may also be affected.
Exploit / POC
Open Handset Alliance Android Multiple Local Vulnerabilities
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Open Handset Alliance Android Multiple Local Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Open Handset Alliance Android Multiple Local Vulnerabilities
References:
References:
- Android Homepage (Open Handset Alliance)