Open Handset Alliance Android Local Privilege Escalation Vulnerability

Bugtraq ID:	46112
Class:	Unknown
CVE:
Remote:	No
Local:	Yes
Published:	Sep 05 2010 12:00AM
Updated:	Feb 11 2011 02:29PM
Credit:	The Android Exploid Crew
Vulnerable:	Open Handset Alliance Android 2.3 Open Handset Alliance Android 2.2 Open Handset Alliance Android 2.1 Open Handset Alliance Android 1.5 CRCxx Open Handset Alliance Android 1.5 CRBxx Open Handset Alliance Android 1.5 CRB-43 Open Handset Alliance Android 1.5 CRB-42 Open Handset Alliance Android 1.5 COCxx Open Handset Alliance Android 1.5 CBDxx Open Handset Alliance Android 1.5 Open Handset Alliance Android 1.0 HTC HTC Wildfire 0
Not Vulnerable:

Open Handset Alliance Android Local Privilege Escalation Vulnerability

Open Handset Alliance Android is prone to a privilege-escalation vulnerability.

Successfully exploiting this issue can allow attackers to elevate privileges, leading to a complete compromise of the device.

Open Handset Alliance Android Local Privilege Escalation Vulnerability

The following exploits are available:

• /data/vulnerabilities/exploits/46112-1.c
• /data/vulnerabilities/exploits/46112-2.c

Open Handset Alliance Android Local Privilege Escalation Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Open Handset Alliance Android Local Privilege Escalation Vulnerability

References:

• Android Homepage (Open Handset Alliance)