NVD

Id
17165  
Name
CVE-2016-0804  
Description
The NuPlayer::GenericSource::notifyPreparedAndCleanup function in media/libmediaplayerservice/nuplayer/GenericSource.cpp in mediaserver in Android 5.x before 5.1.1 LMY49G and 6.x before 2016-02-01 improperly manages mDrmManagerClient objects, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 25070434.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-02-06  
Modified Date
2016-03-14  
Seq
2016-0804  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
95545 17165 CVE-2016-0804 http://source.android.com/security/bulletin/2016-02-01.html  View
95546 17165 CVE-2016-0804 https://android.googlesource.com/platform%2Fframeworks%2Fav/+/224858e719d045c8554856b12c4ab73d2375cf33  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
823 JVNDB-2016-001596 Android のメディアサーバの media/libmediaplayerservice/nuplayer/GenericSource.cpp における任意のコードを実行される脆弱性 Android のメディアサーバの media/libmediaplayerservice/nuplayer/GenericSource.cpp の NuPlayer::GenericSource::notifyPreparedAndCleanup 関数は、mDrmManagerClient オブジェクトを適切に管理しないため、任意のコードを実行される、またはサービス運用妨害 (メモリ破損) 状態にされる脆弱性が存在します。 CVE-2016-0804 87008 CVE-2016-0804 17165 10 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-001596.html 2016-02-01 2016-03-16 View