NVD

Id
25480  
Name
CVE-2015-3845  
Description
The Parcel::appendFrom function in libs/binder/Parcel.cpp in Binder in Android before 5.1.1 LMY48M does not consider parcel boundaries during identification of binder objects in an append operation, which allows attackers to obtain a different application"s privileges via a crafted application, aka internal bug 17312693.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-19  
Published
2015-09-30  
Modified Date
2015-10-01  
Seq
2015-3845  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
134775 25480 CVE-2015-3845 https://android.googlesource.com/platform/frameworks/native/+/e68cbc3e9e66df4231e70efa3e9c41abc12aea20  View
134776 25480 CVE-2015-3845 [android-security-updates] 20150909 Nexus Security Bulletin (September 2015)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
9715 JVNDB-2015-005035 Android の Binder の libs/binder/Parcel.cpp の Parcel::appendFrom 関数における異なるアプリケーションの権限を取得される脆弱性 Android の Binder の libs/binder/Parcel.cpp の Parcel::appendFrom 関数は、追加操作における binder オブジェクトの識別中にパーセル境界を考慮しないため、異なるアプリケーションの権限を取得される脆弱性が存在します。 CVE-2015-3845 81070 CVE-2015-3845 25480 6.8 http://jvndb.jvn.jp/ja/contents/2015/JVNDB-2015-005035.html 2015-08-13 2015-10-02 View