NVD

Id
25478  
Name
CVE-2015-3843  
Description
The SIM Toolkit (STK) framework in Android before 5.1.1 LMY48I allows attackers to (1) intercept or (2) emulate unspecified Telephony STK SIM commands via an application that sends a crafted Intent, related to com/android/internal/telephony/cat/AppInterface.java, aka internal bug 21697171.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2015-09-30  
Modified Date
2015-10-01  
Seq
2015-3843  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
134768 25478 CVE-2015-3843 https://android.googlesource.com/platform/frameworks/base/+/a5e904e7eb3aaec532de83ca52e24af18e0496b4  View
134769 25478 CVE-2015-3843 https://android.googlesource.com/platform/frameworks/opt/telephony/+/b48581401259439dc5ef6dcf8b0f303e4cbefbe9  View
134770 25478 CVE-2015-3843 https://android.googlesource.com/platform/packages/apps/Stk/+/1d8e00160c07ae308e5b460214eb2a425b93ccf7  View
134771 25478 CVE-2015-3843 https://android.googlesource.com/platform/packages/services/Telephony/+/fcb1d13c320dd1a6350bc7af3166929b4d54a456  View
134772 25478 CVE-2015-3843 [android-security-updates] 20150812 Nexus Security Bulletin (August 2015)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
9713 JVNDB-2015-005033 Android の SIM Toolkit における不特定の Telephony STK SIM コマンドをインターセプトされる脆弱性 Android の SIM Toolkit (STK) には、com/android/internal/telephony/cat/AppInterface.java に関する処理に不備があるため、不特定の Telephony STK SIM コマンドを (1) インターセプトされる、または (2) エミュレートされる脆弱性が存在します。 CVE-2015-3843 81068 CVE-2015-3843 25478 9.3 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-005033.html 2015-07-09 2015-10-02 View