First published: Mon Feb 06 2017(Updated: )
An elevation of privilege vulnerability in Mediaserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32706020.
Credit: security@android.com
Affected Software | Affected Version | How to fix |
---|---|---|
Android | =6.0 | |
Android | =6.0.1 | |
Android | =7.0 | |
Android | =7.1.0 | |
Android | =7.1.1 | |
Android | ||
=6.0 | ||
=6.0.1 | ||
=7.0 | ||
=7.1.0 | ||
=7.1.1 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2017-0415 is rated as High due to its potential to allow local malicious applications to execute arbitrary code within privileged processes.
To fix CVE-2017-0415, ensure your Android device is updated to a version that includes security patches addressing this vulnerability.
CVE-2017-0415 affects Android versions 6.0, 6.0.1, 7.0, 7.1.0, and 7.1.1.
An attacker can exploit CVE-2017-0415 to gain elevated privileges, allowing them to execute malicious code that typically requires higher system access.
CVE-2017-0415 is a local elevation of privilege vulnerability that requires physical access to the device to exploit.