CVE

Id
48913  
CVE No.
CVE-2011-1001  
Status
Candidate  
Description
dexdump in Android SDK before 2.3 does not properly perform structural verification, which allows user-assisted remote attackers to cause a denial of service (dexdump crash) and possibly execute arbitrary code via a malformed APK or dex file that calls a method using more arguments than the number of register that have been declared for that method.  
Phase
Assigned (20110214)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
531087 48913 CVE-2011-1001 FULLDISC:20110328 Android SDK: Segmentation fault with dexdump / dexDecodeDebugInfo  View
531088 48913 CVE-2011-1001 URL:http://seclists.org/fulldisclosure/2011/Mar/329  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
31115 JVNDB-2011-001354 Control Group Configuration Library の parse_cgroup_spec 関数におけるヒープベースのバッファオーバーフローの脆弱性 Control Group Configuration Library の tools/tools-common.c 内にある parse_cgroup_spec 関数には、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2011-1006 48913 7.2 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001354.html  View