CVE-2011-1149: High severity android vulnerability
Android before 2.3 does not properly restrict access to the system property space, which allows local applications to bypass the application sandbox and gain privileges, as demonstrated by psneuter and KillingInTheNameOf, related to the use of Android shared memory (ashmem) and ASHMEMSETPROTMASK.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2011-1149?
CVE-2011-1149 is considered a critical vulnerability that allows local applications to bypass the application sandbox on vulnerable Android versions.
Which versions of Android are affected by CVE-2011-1149?
CVE-2011-1149 affects Android versions up to and including 2.2.2.
How can users mitigate the risks associated with CVE-2011-1149?
The best mitigation for CVE-2011-1149 is to upgrade to a newer version of Android that is not affected by this vulnerability.
What exploit methods are associated with CVE-2011-1149?
CVE-2011-1149 is exploited through methods such as psneuter and KillingInTheNameOf, which allow privilege escalation.
Is there a patch available for CVE-2011-1149?
There is no direct patch available for CVE-2011-1149; upgrading to a secure version of Android is the recommended solution.