Svi - CERT CVE

Rezultati pretraživanja za 'Proizvođač: google'

ID CVSS Sažetak Zadnje ažurirano Objavljeno
CVE-2015-3823 10.0 libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 21335999. 2015-10-07 14:28:00
CVE-2015-6575 10.0 SampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I does not properly consider integer promotion, which allows remote attackers to execute arbitrary code or cause a denial of service (integer overflow and memory corruption) via crafted a 2015-10-01 18:10:00
CVE-2015-3863 9.3 Multiple integer overflows in the Blob class in keystore/keystore.cpp in Keystore in Android before 5.1.1 LMY48M allow attackers to execute arbitrary code and read arbitrary Keystore keys via an application that uses a crafted blob in an insert opera 2015-10-01 18:10:00
CVE-2015-3861 5.0 Multiple integer overflows in the addVorbisCodecInfo function in matroska/MatroskaExtractor.cpp in libstagefright in mediaserver in Android before 5.1.1 LMY48M allow remote attackers to cause a denial of service (device inoperability) via crafted Mat 2015-10-01 18:09:00
CVE-2015-3860 7.2 packages/Keyguard/res/layout/keyguard_password_view.xml in Lockscreen in Android 5.x before 5.1.1 LMY48M does not restrict the number of characters in the passwordEntry input field, which allows physically proximate attackers to bypass intended acces 2015-10-01 18:08:00
CVE-2015-3858 9.3 The checkDestination function in internal/telephony/SMSDispatcher.java in Android before 5.1.1 LMY48M relies on an obsolete permission name for an authorization check, which allows attackers to bypass an intended user-confirmation requirement for SMS 2015-10-01 18:07:00
CVE-2015-3849 9.3 The Region_createFromParcel function in core/jni/android/graphics/Region.cpp in Region in Android before 5.1.1 LMY48M does not check the return values of certain read operations, which allows attackers to execute arbitrary code via an application tha 2015-10-01 18:07:00
CVE-2015-3845 6.8 The Parcel::appendFrom function in libs/binder/Parcel.cpp in Binder in Android before 5.1.1 LMY48M does not consider parcel boundaries during identification of binder objects in an append operation, which allows attackers to obtain a different applic 2015-10-01 18:03:00
CVE-2015-3844 6.8 The getProcessRecordLocked method in services/core/java/com/android/server/am/ActivityManagerService.java in ActivityManager in Android before 5.1.1 LMY48I allows attackers to trigger incorrect process loading via a crafted application, as demonstrat 2015-10-01 18:03:00
CVE-2015-3843 9.3 The SIM Toolkit (STK) framework in Android before 5.1.1 LMY48I allows attackers to (1) intercept or (2) emulate unspecified Telephony STK SIM commands via an application that sends a crafted Intent, related to com/android/internal/telephony/cat/AppIn 2015-10-01 18:03:00
ID CVSS Sažetak Zadnje ažurirano Objavljeno
Stranica
/1585
Zapisa po stranici: