Open Handset Alliance Android 'dexdump' Remote Denial Of Service Vulnerability

Bugtraq ID:	48654
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2011-1001
Remote:	Yes
Local:	No
Published:	Jul 12 2011 12:00AM
Updated:	Jul 12 2011 12:00AM
Credit:	Dan Bornstein
Vulnerable:	Open Handset Alliance Android 2.0.1 Open Handset Alliance Android Change 8815 Open Handset Alliance Android 2.2 Open Handset Alliance Android 2.1.1 Open Handset Alliance Android 2.1 Open Handset Alliance Android 2.0 Open Handset Alliance Android 1.5 CRCxx Open Handset Alliance Android 1.5 CRBxx Open Handset Alliance Android 1.5 CRB-43 Open Handset Alliance Android 1.5 CRB-42 Open Handset Alliance Android 1.5 COCxx Open Handset Alliance Android 1.5 CBDxx Open Handset Alliance Android 1.5 Open Handset Alliance Android 1.0 Open Handset Alliance Android 0
Not Vulnerable:	Open Handset Alliance Android 2.3

Open Handset Alliance Android 'dexdump' Remote Denial Of Service Vulnerability

Open Handset Alliance Android is prone to a denial-of-service vulnerability that affects the Dalvik SDK.

Attackers can exploit this issue to cause 'dexdump' to crash, triggering a denial-of-service condition.

Open Handset Alliance Android 'dexdump' Remote Denial Of Service Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Open Handset Alliance Android 'dexdump' Remote Denial Of Service Vulnerability

Solution:
Updates are available. Please see the references for details.

Open Handset Alliance Android 'dexdump' Remote Denial Of Service Vulnerability

References:

• Fix two dex file structural verification issues. (Dan Bornstein)
  
• Android Homepage (Open Handset Alliance)