NVD

Id
7041  
Name
CVE-2017-0384  
Description
An elevation of privilege vulnerability in lvm/wrapper/Bundle/EffectBundle.cpp in libeffects in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-32095626.  
Reject
 
CVSS Version
2  
CVSS Score
9.3  
Severity
High  
CVSS Base Score
9.3  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-19  
Published
2017-01-12  
Modified Date
2017-01-18  
Seq
2017-0384  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
39613 7041 CVE-2017-0384 95239  View
39614 7041 CVE-2017-0384 https://android.googlesource.com/platform/frameworks/av/+/321ea5257e37c8edb26e66fe4ee78cca4cd915fe  View
39615 7041 CVE-2017-0384 https://source.android.com/security/bulletin/2017-01-01.html  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
64677 JVNDB-2017-001064 Audioserver の libeffects の lvm/wrapper/Bundle/EffectBundle.cpp における権限を昇格される脆弱性 Audioserver の libeffects の lvm/wrapper/Bundle/EffectBundle.cpp には、権限を昇格される脆弱性が存在します。 CVE-2017-0384 CVE-2017-0384 7041 9.3 7.8 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-001064.html 2017-01-03 2017-01-24 View