Multiple Android Devices CVE-2014-0997 Denial of Service Vulnerability

Bugtraq ID:	72311
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2014-0997
Remote:	Yes
Local:	No
Published:	Jan 26 2015 12:00AM
Updated:	Jan 26 2015 12:00AM
Credit:	Andres Blanco from the CoreLabs Team
Vulnerable:	Samsung SM-T310 0 - phpBB Group phpBB 2.0.1 - phpBB Group phpBB 2.0 .0 Motorola Razr HD 0 LG D806 0 - phpBB Group phpBB 2.0.1 - phpBB Group phpBB 2.0 .0 Google Nexus 5 Google Nexus 4
Not Vulnerable:

Multiple Android Devices CVE-2014-0997 Denial of Service Vulnerability

Multiple android devices are prone to a denial-of-service vulnerability.

Successfully exploiting this issue will allow attackers to cause denial-of-service conditions.

Multiple Android Devices CVE-2014-0997 Denial of Service Vulnerability

The following proof-of-concept code is available:

• /data/vulnerabilities/exploits/72311.py

Multiple Android Devices CVE-2014-0997 Denial of Service Vulnerability

Solution:
Currently, we are not aware of any vendor-supplied patches. If you feel we are in error or are aware of more recent information, please mail us at: [email protected].

Multiple Android Devices CVE-2014-0997 Denial of Service Vulnerability

References:

• Android Homepage (Google)
  
• CORE-2015-0002: Android WiFi-Direct Denial of Service (CoreLabs)