Google Android APK Signature Security Bypass Vulnerability
BID:64529
CVE-2013-6792 |Info
Google Android APK Signature Security Bypass Vulnerability
| Bugtraq ID: | 64529 |
| Class: | Design Error |
| CVE: |
CVE-2013-6792 |
| Remote: | Yes |
| Local: | No |
| Published: | Nov 08 2013 12:00AM |
| Updated: | Jan 09 2014 02:01AM |
| Credit: | Zhang YunHai of NSFOCUS Security Team |
| Vulnerable: | |
| Not Vulnerable: | |
Discussion
Google Android APK Signature Security Bypass Vulnerability
Google Android is prone to a security-bypass vulnerability.
Attackers can exploit this issue to bypass certain security restrictions to perform unauthorized actions. This may aid in further attacks.
Versions prior to Android 4.4 are vulnerable.
Google Android is prone to a security-bypass vulnerability.
Attackers can exploit this issue to bypass certain security restrictions to perform unauthorized actions. This may aid in further attacks.
Versions prior to Android 4.4 are vulnerable.
Exploit / POC
Google Android APK Signature Security Bypass Vulnerability
The researcher who discovered this issue has created a proof-of-concept. Please see the references for more information.
The researcher who discovered this issue has created a proof-of-concept. Please see the references for more information.
Solution / Fix
Google Android APK Signature Security Bypass Vulnerability
Solution:
Updates are available. Please see the references or vendor advisory for more information.
Solution:
Updates are available. Please see the references or vendor advisory for more information.