NVD

Id
7991  
Name
CVE-2011-1001  
Description
dexdump in Android SDK before 2.3 does not properly perform structural verification, which allows user-assisted remote attackers to cause a denial of service (dexdump crash) and possibly execute arbitrary code via a malformed APK or dex file that calls a method using more arguments than the number of register that have been declared for that method.  
Reject
 
CVSS Version
2  
CVSS Score
4.3  
Severity
Medium  
CVSS Base Score
4.3  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:N/I:N/A:P)  
Pub Date
2017-01-07  
Published
2011-07-08  
Modified Date
2011-09-06  
Seq
2011-1001  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
45378 7991 CVE-2011-1001 http://android.git.kernel.org/?p=platform/dalvik.git;a=commit;h=4b0750e8df91220690bb417f45d7ae8b7851b220  View
45379 7991 CVE-2011-1001 20110328 Android SDK: Segmentation fault with dexdump / dexDecodeDebugInfo  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
34048 JVNDB-2011-004290 Android SDK の dexdump におけるサービス運用妨害 (DoS) の脆弱性 Android SDK の dexdump は、構造確認を適切に実行しないため、サービス運用妨害 (dexdump クラッシュ) 状態となる、または任意のコードを実行される脆弱性が存在します。 CVE-2011-1001 48908 CVE-2011-1001 7991 4.3 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-004290.html 2011-07-08 2012-03-27 View