CVE

Id
39189  
CVE No.
CVE-2009-1754  
Status
Candidate  
Description
The PackageManagerService class in services/java/com/android/server/PackageManagerService.java in Android 1.5 through 1.5 CRB42 does not properly check developer certificates during processing of sharedUserId requests at an application"s installation time, which allows remote user-assisted attackers to access application data by creating a package that specifies a shared user ID with an arbitrary application.  
Phase
Assigned (20090521)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
430932 39189 CVE-2009-1754 BUGTRAQ:20090522 [oCERT-2009-006] Android improper package verification when using shared uids  View
430933 39189 CVE-2009-1754 URL:http://www.securityfocus.com/archive/1/503770  View
430934 39189 CVE-2009-1754 MLIST:[oss-security] 20090522 [oCERT-2009-006] Android improper package verification when using shared uids  View
430935 39189 CVE-2009-1754 URL:http://www.openwall.com/lists/oss-security/2009/05/22/14  View
430936 39189 CVE-2009-1754 MISC:http://www.ocert.org/advisories/ocert-2009-006.html  View
430937 39189 CVE-2009-1754 CONFIRM:http://android.git.kernel.org/?p=platform/frameworks/base.git;a=commit;h=5d6d773fab559fdc12e553d60d789f3991ac552c  View
430938 39189 CVE-2009-1754 BID:35090  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
40836 JVNDB-2009-001842 Xen の hypervisor_callback 関数におけるサービス運用妨害 (DoS) の脆弱性 Xen の hypervisor_callback 関数には、特定のアドレス範囲でのセグメンテーションフォルトにより、ゲスト OS がサービス運用妨害 (DoS) 状態となる脆弱性が存在します。 CVE-2009-1758 39189 5 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001842.html  View