An information disclosure vulnerability in id3/ID3.cpp in libstagefright in Mediaserver could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it could be used to access sensitive data without permission. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-32377688.
References
| Link | Resource |
|---|---|
| http://www.securityfocus.com/bid/95232 | Third Party Advisory VDB Entry |
| https://android.googlesource.com/platform/frameworks/av/+/7a3246b870ddd11861eda2ab458b11d723c7f62c | Issue Tracking Patch |
| https://source.android.com/security/bulletin/2017-01-01.html | Vendor Advisory |
| http://www.securityfocus.com/bid/95232 | Third Party Advisory VDB Entry |
| https://android.googlesource.com/platform/frameworks/av/+/7a3246b870ddd11861eda2ab458b11d723c7f62c | Issue Tracking Patch |
| https://source.android.com/security/bulletin/2017-01-01.html | Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 03:02
| Type | Values Removed | Values Added |
|---|---|---|
| References | () http://www.securityfocus.com/bid/95232 - Third Party Advisory, VDB Entry | |
| References | () https://android.googlesource.com/platform/frameworks/av/+/7a3246b870ddd11861eda2ab458b11d723c7f62c - Issue Tracking, Patch | |
| References | () https://source.android.com/security/bulletin/2017-01-01.html - Vendor Advisory |
Information
Published : 2017-01-12 20:59
Updated : 2024-11-21 03:02
NVD link : CVE-2017-0397
Mitre link : CVE-2017-0397
CVE.ORG link : CVE-2017-0397
JSON object : View
Products Affected
- android
CWE
CWE-200
Exposure of Sensitive Information to an Unauthorized Actor