BID:68415

Google Android CVE-2013-6272 Remote Security Bypass Vulnerability

CVE-2013-6272 |

Info

Google Android CVE-2013-6272 Remote Security Bypass Vulnerability

Bugtraq ID:	68415
Class:	Design Error
CVE:	CVE-2013-6272
Remote:	Yes
Local:	No
Published:	Jul 04 2014 12:00AM
Updated:	Aug 22 2014 02:14PM
Credit:	Marco Lux and Pedro Umbelino
Vulnerable:

Not Vulnerable:

Discussion

Google Android CVE-2013-6272 Remote Security Bypass Vulnerability

Google Android is prone to a remote security-bypass vulnerability.

Attackers can exploit this issue to bypass certain security restrictions to perform unauthorized actions. This may aid in further attacks.

Exploit / POC

Google Android CVE-2013-6272 Remote Security Bypass Vulnerability

The researcher who discovered this issue has created a proof-of-concept. Please see the references for more information.

Solution / Fix

Google Android CVE-2013-6272 Remote Security Bypass Vulnerability

Solution:
Reportedly, the issue is fixed; however, Symantec has not confirmed this. Please contact the vendor for more information.

References

Google Android CVE-2013-6272 Remote Security Bypass Vulnerability

References:

Android Homepage (Google)