Google Android System UI Multiple Remote Code Execution Vulnerabilities

Bugtraq ID:	99472
Class:	Design Error
CVE:	CVE-2017-0700 CVE-2017-0701 CVE-2017-0702 CVE-2017-0703 CVE-2017-0704
Remote:	Yes
Local:	No
Published:	Jul 06 2017 12:00AM
Updated:	Jul 06 2017 12:00AM
Credit:	Zinuo Han of Chengdu Security Response Center, Qihoo 360 Technology Co. Ltd. and Ao Wang (@ArayzSegment) of Pangu Team, Vasily Vasiliev, Dzmitry Lukyanenka, Yuxiang Li (@Xbalien29) of Tencent Security Platform Department.
Vulnerable:	Google Android 7.1.1 Google Android 6.0.1 Google Android 5.1.1 Google Android 5.0.2 Google Android 4.4.4 Google Android 7.1.2 Google Android 7.0 Google Android 6.0
Not Vulnerable:

Google Android System UI Multiple Remote Code Execution Vulnerabilities

Google Android is prone to multiple remote code-execution vulnerabilities.

An attacker can leverage these issues to execute arbitrary code within the context of a privileged process.

These issues are being tracked by Android Bug IDs A-35639138, A-36385715 [2], A-36621442, A-33123882 and A-33059280.

Google Android System UI Multiple Remote Code Execution Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Google Android System UI Multiple Remote Code Execution Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Google Android System UI Multiple Remote Code Execution Vulnerabilities

References:

• Android Homepage (Google)
  
• Android Security Bulletin�??July 2017 (Android)