CVE-2017-0783

2017-09-14 21:29:00 2018-01-18 19:18:08

A information disclosure vulnerability in the Android system (bluetooth). Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-63145701.

Vector

ADJACENT_NETWORK

Complexity

LOW

Authentication

NONE

Confidentiality

COMPLETE

Integrity

NONE

Availability

NONE

Google Android 6.0 (not an official CPE) Google Android 5.1.1 (not an official CPE) Google Android 5.1.0 (not an official CPE) Google Android 5.1 (not an official CPE) Google Android 5.0.2 (not an official CPE) Google Android 5.0.1 (not an official CPE) Google Android Operating System 5.0 Google Android Operating System 4.4.4 Google Android Operating System 4.4.3 Google Android Operating System 4.4.2 Google Android Operating System 4.4.1 Google Android Operating System 4.4 Google Android Operating System 4.3.1 Google Android Operating System 4.3 Google Android Operating System 4.2.2 Google Android Operating System 4.2.1 Google Android Operating System 4.2 (Jelly Bean) Google Android Operating System 4.1.2 Google Android Operating System 4.1 Google Android Operating System 4.0.4 Google Android Operating System 4.0.3 Google Android Operating System 4.0.2 Google Android Operating System 4.0.1 Google Android Operating System 4.0 Google Android 6.0.1 (not an official CPE) Google Android 7.0 (not an official CPE) Google Android 7.1.0 (not an official CPE) Google Android 7.1.1 (not an official CPE) Google Android 7.1.2 (not an official CPE) Google Android 8.0 (not an official CPE)

Google - Android

Advisory	Patch	Confirmed	Link
			100811
			http://www.oracle.com/technetwork/security-advisory/cpuj...
			https://source.android.com/security/bulletin/2017-09-01

Information Exposure (ID 200)

Related CAPEC 7 Subverting Environment Variable Values (CAPEC-ID 13) Footprinting (CAPEC-ID 169) Exploiting Trust in Client (aka Make the Client Invisible) (CAPEC-ID 22) Browser Fingerprinting (CAPEC-ID 472) Session Credential Falsification through Prediction (CAPEC-ID 59) Reusing Session IDs (aka Session Replay) (CAPEC-ID 60) Using Slashes in Alternate Encoding (CAPEC-ID 79)