Google Android Mediaserver CVE-2017-0592 Remote Code Execution Vulnerability

Bugtraq ID:	98125
Class:	Unknown
CVE:	CVE-2017-0592
Remote:	Yes
Local:	No
Published:	May 01 2017 12:00AM
Updated:	May 18 2017 04:17PM
Credit:	The vendor reported this issue.
Vulnerable:	Google Pixel XL 0 Google Pixel C 0 Google Pixel 0 Google Nexus Player 0 Google Nexus 9 Google Nexus 6P Google Nexus 6 Google Nexus 5X Google Android One 0 Google Android 7.1.1 Google Android 6.0.1 Google Android 5.1.1 Google Android 5.0.2 Google Android 4.4.4 Google Android 7.1.2 Google Android 7.0 Google Android 6.0
Not Vulnerable:

Google Android Mediaserver CVE-2017-0592 Remote Code Execution Vulnerability

Google Android is prone to a remote code execution vulnerability.

An attacker can exploit this issue to execute arbitrary code in the context of the mediaserver process. Failed exploits may result in denial-of-service conditions.

This issue is being tracked by Android Bug ID A-34970788.

Google Android Mediaserver CVE-2017-0592 Remote Code Execution Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Google Android Mediaserver CVE-2017-0592 Remote Code Execution Vulnerability

References:

• Android Homepage (Google)
  
• Android Security Bulletin�??May 2017 (Android)