NVD

Id
49596  
Name
CVE-2009-2348  
Description
Android 1.5 CRBxx allows local users to bypass the (1) Manifest.permission.CAMERA (aka android.permission.CAMERA) and (2) Manifest.permission.AUDIO_RECORD (aka android.permission.RECORD_AUDIO) configuration settings by installing and executing an application that does not make a permission request before using the camera or microphone.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2009-07-17  
Modified Date
2012-02-29  
Seq
2009-2348  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
250677 49596 CVE-2009-2348 http://android.git.kernel.org/?p=platform/frameworks/base.git;a=commit;h=4d8adefd35efdea849611b8b02d61f9517e47760  View
250678 49596 CVE-2009-2348 http://android.git.kernel.org/?p=platform/frameworks/base.git;a=commit;h=7b7225c8fdbead25235c74811b30ff4ee690dc58  View
250679 49596 CVE-2009-2348 http://android.git.kernel.org/?p=platform/packages/apps/Camera.git;a=commit;h=e655d54160e5a56d4909f2459eeae9012e9f187f  View
250680 49596 CVE-2009-2348 http://www.ocert.org/advisories/ocert-2009-011.html  View
250681 49596 CVE-2009-2348 [oss-security] 20090716 [oCERT-2009-011] Android improper camera and audio permission verification  View
250682 49596 CVE-2009-2348 20090716 [oCERT-2009-011] Android improper camera and audio permission verification  View
250683 49596 CVE-2009-2348 35717  View
250684 49596 CVE-2009-2348 android-permission-security-bypass(51798)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
41630 JVNDB-2009-002637 Android における Manifest.permission.CAMER および Manifest.permission.AUDIO_RECORD の設定を回避される脆弱性 Android には、Manifest.permission.CAMER および Manifest.permission.AUDIO_RECORD の設定を回避される脆弱性が存在します。 CVE-2009-2348 39779 CVE-2009-2348 49596 6.9 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-002637.html 2009-05-26 2011-02-23 View