CVE-2015-7717: Critical severity android vulnerability

Q: What does an attacker need to exploit this issue?

An attacker needs to get a crafted application onto the affected Android device. The vulnerability is network-reachable in its scoring vector, but the description specifically identifies a crafted application as the exploit vehicle.

Q: Which Android versions are affected?

Android 5.x releases before 5.1.1 LMY48T are affected. Android 6.0 releases before 2015-10-01 are also affected.

Q: What is the likely impact of successful exploitation?

Successful exploitation can allow an attacker to gain privileges. The supplied severity vector indicates impacts to confidentiality, integrity, and availability.

Published Oct 6, 2015

Updated

mediaserver in Android 5.x before 5.1.1 LMY48T and 6.0 before 2015-10-01 allows attackers to gain privileges via a crafted application, aka internal bug 19573085, a different vulnerability than CVE-2015-6596.

Affected Software

1 affected component

Google Android<=5.1

Event History

Oct 6, 2015

CVE Published

via MITRE·05:00 PM

Data Sourced

via MITRE·05:00 PM

Description

Frequently Asked Questions

What does an attacker need to exploit this issue?

An attacker needs to get a crafted application onto the affected Android device. The vulnerability is network-reachable in its scoring vector, but the description specifically identifies a crafted application as the exploit vehicle.

Which Android versions are affected?

Android 5.x releases before 5.1.1 LMY48T are affected. Android 6.0 releases before 2015-10-01 are also affected.

What is the likely impact of successful exploitation?

Successful exploitation can allow an attacker to gain privileges. The supplied severity vector indicates impacts to confidentiality, integrity, and availability.

CVE-2015-7717: Critical severity android vulnerability

Affected Software

Event History

Frequently Asked Questions

What does an attacker need to exploit this issue?

Which Android versions are affected?

What is the likely impact of successful exploitation?

Company

Resources

Contact

Frequently Asked Questions

What does an attacker need to exploit this issue?

Which Android versions are affected?

What is the likely impact of successful exploitation?