NVD

Id
47139  
Name
CVE-2012-6422  
Description
The kernel in Samsung Galaxy S2, Galaxy Note 2, MEIZU MX, and possibly other Android devices, when running an Exynos 4210 or 4412 processor, uses weak permissions (0666) for /dev/exynos-mem, which allows attackers to read or write arbitrary physical memory and gain privileges via a crafted application, as demonstrated by ExynosAbuse.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2012-12-17  
Modified Date
2012-12-21  
Seq
2012-6422  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
235970 47139 CVE-2012-6422 http://arstechnica.com/security/2012/12/developer-warns-of-critical-vulnerability-in-many-samsung-smartphones/  View
235971 47139 CVE-2012-6422 http://forum.xda-developers.com/showthread.php?p=35469999  View
235972 47139 CVE-2012-6422 http://forum.xda-developers.com/showthread.php?t=2051290  View
235973 47139 CVE-2012-6422 http://project-voodoo.org/articles/instant-fix-app-for-exynos-mem-abuse-vulnerability-no-root-required-reversible  View
235974 47139 CVE-2012-6422 http://www.sammobile.com/2012/12/16/major-vulnerability-found-on-exynos-4-devices/  View
235975 47139 CVE-2012-6422 http://www.securityweek.com/new-vulnerability-exposed-samsungs-android-devices  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
30022 JVNDB-2012-005729 Samsung GALAXY および Meizu MX など Android デバイスにおける任意の物理メモリを読まれる脆弱性 Samsung GALAXY S、GALAXY Note、Meizu MX およびその他の Android デバイスのカーネルは、Exynos 4210 または 4412 プロセッサで稼働する際、/dev/exynos-mem に対して脆弱なパーミッション (0666) を使用するため、任意の物理メモリを読まれる、または書き込まれる、および権限を取得される脆弱性が存在します。 CVE-2012-6422 59660 CVE-2012-6422 47139 9.3 http://jvndb.jvn.jp/ja/contents/2012/JVNDB-2012-005729.html 2012-12-18 2012-12-25 View