CVE-2017-0814

2017-10-04 03:29:01 2019-10-03 02:03:26

An information disclosure vulnerability in the Android media framework (n/a). Product: Android. Versions: 7.0, 7.1.1, 7.1.2, 8.0. Android ID: A-62800140.

Vector

NETWORK

Complexity

LOW

Authentication

NONE

Confidentiality

NONE

Integrity

NONE

Availability

COMPLETE

Google Android 5.1 (not an official CPE) Google Android 5.0.2 (not an official CPE) Google Android 5.0.1 (not an official CPE) Google Android Operating System 5.0 Google Android Operating System 4.4.4 Google Android Operating System 4.4.3 Google Android Operating System 4.4.2 Google Android Operating System 4.4.1 Google Android Operating System 4.4 Google Android Operating System 4.3.1 Google Android Operating System 4.3 Google Android Operating System 4.2.2 Google Android Operating System 4.2.1 Google Android Operating System 4.2 (Jelly Bean) Google Android Operating System 4.1.2 Google Android Operating System 4.1 Google Android Operating System 4.0.4 Google Android Operating System 4.0.3 Google Android Operating System 4.0.2 Google Android Operating System 4.0.1 Google Android Operating System 4.0 Google Android 5.1.0 (not an official CPE) Google Android 5.1.1 (not an official CPE) Google Android 6.0 (not an official CPE) Google Android 6.0.1 (not an official CPE) Google Android 7.0 (not an official CPE) Google Android 7.1.0 (not an official CPE) Google Android 7.1.1 (not an official CPE) Google Android 7.1.2 (not an official CPE) Google Android 8.0 (not an official CPE)

Google - Android

Advisory	Patch	Confirmed	Link
			https://source.android.com/security/bulletin/pixel/2017-...
			https://android.googlesource.com/platform/external/tremo...
			101151

Information Exposure (ID 200)

Related CAPEC 7 Subverting Environment Variable Values (CAPEC-ID 13) Footprinting (CAPEC-ID 169) Exploiting Trust in Client (aka Make the Client Invisible) (CAPEC-ID 22) Browser Fingerprinting (CAPEC-ID 472) Session Credential Falsification through Prediction (CAPEC-ID 59) Reusing Session IDs (aka Session Replay) (CAPEC-ID 60) Using Slashes in Alternate Encoding (CAPEC-ID 79)