NVD

Id
25472  
Name
CVE-2015-3833  
Description
The getRunningAppProcesses function in services/core/java/com/android/server/am/ActivityManagerService.java in Android before 5.1.1 LMY48I allows attackers to bypass intended getRecentTasks restrictions and discover the name of the foreground application via a crafted application, aka internal bug 20034603.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:N/A:N)  
Pub Date
2017-01-19  
Published
2015-09-30  
Modified Date
2015-10-01  
Seq
2015-3833  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
134754 25472 CVE-2015-3833 http://stackoverflow.com/questions/24625936/getrunningtasks-doesnt-work-in-android-l  View
134755 25472 CVE-2015-3833 https://android.googlesource.com/platform/frameworks/base/+/aaa0fee0d7a8da347a0c47cef5249c70efee209e  View
134756 25472 CVE-2015-3833 [android-security-updates] 20150812 Nexus Security Bulletin (August 2015)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
9707 JVNDB-2015-005027 Android の services/core/java/com/android/server/am/ActivityManagerService.java における getRecentTasks 制限を回避される脆弱性 Android の services/core/java/com/android/server/am/ActivityManagerService.java の getRunningAppProcesses 関数には、getRecentTasks 制限を回避され、フォアグラウンドアプリケーションの名前を取得される脆弱性が存在します。 CVE-2015-3833 81058 CVE-2015-3833 25472 4.3 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-005027.html 2015-07-09 2015-10-02 View