Google Android HTC Components Multiple Security Vulnerabilities

Bugtraq ID:	99474
Class:	Design Error
CVE:	CVE-2017-0707 CVE-2017-0708 CVE-2017-0709
Remote:	Yes
Local:	No
Published:	Jul 06 2017 12:00AM
Updated:	Jul 06 2017 12:00AM
Credit:	Xiling Gong of Tencent Security Platform Department, Yuan-Tsung Lo ([email protected]) and Xuxian Jiang of C0RE Team.
Vulnerable:	Google Android 0
Not Vulnerable:

Google Android HTC Components Multiple Security Vulnerabilities

Google Android is prone to multiple security vulnerabilities.

An attacker can leverage these issues to execute arbitrary code within the context of a privileged process, obtain sensitive information or gain elevated privileges.

These issues are being tracked by Android Bug IDs A-36088467, A-35384879 and A-35468048.

Google Android HTC Components Multiple Security Vulnerabilities

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Google Android HTC Components Multiple Security Vulnerabilities

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Google Android HTC Components Multiple Security Vulnerabilities

References:

• Android Homepage (Google)
  
• Android Security Bulletin�??July 2017 (Android)