NVD

Id
18709  
Name
CVE-2016-2496  
Description
The Framework UI permission-dialog implementation in Android 6.x before 2016-06-01 allows attackers to conduct tapjacking attacks and access arbitrary private-storage files by creating a partially overlapping window, aka internal bug 26677796.  
Reject
 
CVSS Version
2  
CVSS Score
10  
Severity
High  
CVSS Base Score
10  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2016-06-12  
Modified Date
2016-06-14  
Seq
2016-2496  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
103387 18709 CVE-2016-2496 http://source.android.com/security/bulletin/2016-06-01.html  View
103388 18709 CVE-2016-2496 https://android.googlesource.com/platform/frameworks/base/+/613f63b938145bb86cd64fe0752eaf5e99b5f628  View
103389 18709 CVE-2016-2496 https://android.googlesource.com/platform/frameworks/native/+/03a53d1c7765eeb3af0bc34c3dff02ada1953fbf  View
103390 18709 CVE-2016-2496 https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/2068c7997265011ddc5e4dfa3418407881f7f81e  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
2363 JVNDB-2016-003136 Android の Framework UI パーミッションダイアログの実装におけるタップジャック攻撃を実行される脆弱性 Android の Framework UI パーミッションダイアログの実装には、タップジャック (tapjacking) 攻撃を実行され、任意のプライベートストレージのファイルにアクセスされる脆弱性が存在します。 CVE-2016-2496 89002 CVE-2016-2496 18709 10 9.8 http://jvndb.jvn.jp/ja/contents/2016/JVNDB-2016-003136.html 2016-06-06 2016-06-15 View