CVE-2017-0417: High severity Google Android vulnerability

Published Feb 6, 2017

Updated

An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32705438.

Affected Software

29 affected components

Google Android=4.0

Google Android=4.0.1

Google Android=4.0.2

Google Android=4.0.3

Google Android=4.0.4

Google Android=4.1

Google Android=4.1.2

Google Android=4.2

Google Android=4.2.1

Google Android=4.2.2

Google Android=4.3

Google Android=4.3.1

Google Android=4.4

Google Android=4.4.1

Google Android=4.4.2

Google Android=4.4.3

Google Android=4.4.4

Google Android=5.0

Google Android=5.0.1

Google Android=5.0.2

Google Android=5.1

Google Android=5.1.0

Google Android=5.1.1

Google Android=6.0

Google Android=6.0.1

Google Android=7.0

Google Android=7.1.0

Google Android=7.1.1

Google Android

Event History

Feb 6, 2017

CVE Published

via Android·12:00 AM

Feb 8, 2017

CVE Published

via MITRE·03:00 PM

Data Sourced

via MITRE·03:00 PM

DescriptionWeakness

Data Sourced

via NVD·03:59 PM

DescriptionSeverityWeaknessAffected Software

Dec 14, 58332

Event

08:45 PM

Frequently Asked Questions

What is the severity of CVE-2017-0417?

CVE-2017-0417 is rated as High due to its potential to enable local applications to execute arbitrary code in a privileged context.

How do I fix CVE-2017-0417?

To address CVE-2017-0417, update your Android device to the latest security patch provided by Google.

Which Android versions are affected by CVE-2017-0417?

CVE-2017-0417 affects multiple Android versions from 4.0 up to 7.1.1.

What type of vulnerability is CVE-2017-0417?

CVE-2017-0417 is classified as an elevation of privilege vulnerability.

Can CVE-2017-0417 be exploited remotely?

No, CVE-2017-0417 requires local access to exploit the vulnerability.