CVE

Id
93527  
CVE No.
CVE-2016-6707  
Status
Candidate  
Description
An elevation of privilege vulnerability in System Server in Android 6.x before 2016-11-01 and 7.0 before 2016-11-01 could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Android ID: A-31350622.  
Phase
Assigned (20160811)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
793950 93527 CVE-2016-6707 EXPLOIT-DB:40874  View
793951 93527 CVE-2016-6707 URL:https://www.exploit-db.com/exploits/40874/  View
793952 93527 CVE-2016-6707 MISC:https://bugs.chromium.org/p/project-zero/issues/detail?id=928  View
793953 93527 CVE-2016-6707 MISC:https://googleprojectzero.blogspot.com/2016/12/bitunmap-attacking-android-ashmem.html  View
793954 93527 CVE-2016-6707 CONFIRM:https://source.android.com/security/bulletin/2016-11-01.html  View
793955 93527 CVE-2016-6707 BID:94164  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
4346 JVNDB-2016-005119 Adobe Flash Player における任意のコードを実行される脆弱性 Adobe Flash Player には、解放済みメモリの使用 (Use-after-free) により、任意のコードを実行される脆弱性が存在します。 CVE-2016-7020 93527 10 9.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-005119.html  View