Android For MSM Project CVE-2013-6122 Local Security Bypass Vulnerability
BID:63655
Info
Android For MSM Project CVE-2013-6122 Local Security Bypass Vulnerability
| Bugtraq ID: | 63655 |
| Class: | Input Validation Error |
| CVE: |
CVE-2013-6122 |
| Remote: | No |
| Local: | Yes |
| Published: | Nov 07 2013 12:00AM |
| Updated: | Mar 19 2015 09:14AM |
| Credit: | Jonathan Salwan of the Sysdream Security Lab |
| Vulnerable: |
Avaya 96x1 IP Deskphone 6.2 Avaya 96x1 IP Deskphone 6 |
| Not Vulnerable: | |
Discussion
Android For MSM Project CVE-2013-6122 Local Security Bypass Vulnerability
Android For MSM project is prone to a local security-bypass vulnerability because it fails to sufficiently validate user-supplied input.
An attacker with physical access to the computer can exploit this issue to bypass security restrictions that may aid in further attacks.
Android For MSM project is prone to a local security-bypass vulnerability because it fails to sufficiently validate user-supplied input.
An attacker with physical access to the computer can exploit this issue to bypass security restrictions that may aid in further attacks.
Exploit / POC
Android For MSM Project CVE-2013-6122 Local Security Bypass Vulnerability
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Android For MSM Project CVE-2013-6122 Local Security Bypass Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.
References
Android For MSM Project CVE-2013-6122 Local Security Bypass Vulnerability
References:
References: