NVD

Id
8120  
Name
CVE-2011-1149  
Description
Android before 2.3 does not properly restrict access to the system property space, which allows local applications to bypass the application sandbox and gain privileges, as demonstrated by psneuter and KillingInTheNameOf, related to the use of Android shared memory (ashmem) and ASHMEM_SET_PROT_MASK.  
Reject
 
CVSS Version
2  
CVSS Score
7.2  
Severity
High  
CVSS Base Score
7.2  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:C/I:C/A:C)  
Pub Date
2017-01-07  
Published
2011-04-21  
Modified Date
2011-04-22  
Seq
2011-1149  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
46491 8120 CVE-2011-1149 http://android.git.kernel.org/?p=kernel/common.git;a=commit;h=c98a285075f26e2b17a5baa2cb3eb6356a75597e  View
46492 8120 CVE-2011-1149 http://android.git.kernel.org/?p=platform/system/core.git;a=commit;h=25b15be9120bcdaa0aba622c67ad2c835d9e91ca  View
46493 8120 CVE-2011-1149 http://c-skills.blogspot.com/2011/01/adb-trickery-again.html  View
46494 8120 CVE-2011-1149 http://forum.xda-developers.com/wiki/index.php?title=HTC_Vision#Rooting_the_G2  View
46495 8120 CVE-2011-1149 http://groups.google.com/group/android-security-discuss/browse_thread/thread/15f97658c88d6827/e86db04652651971?show_docid=e86db04652651971  View
46496 8120 CVE-2011-1149 https://github.com/tmzt/g2root-kmod/tree/scotty2/scotty2  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
31438 JVNDB-2011-001678 Android におけるアプリケーションサンドボックスを回避される脆弱性 Android は、Android shared memory (ashmem) 、および ASHMEM_SET_PROT_MASK に関する処理に不備があり、システムプロパティスペースへのアクセスを適切に制限しないため、アプリケーションサンドボックスを回避され、権限を取得される脆弱性が存在します。 CVE-2011-1149 49056 CVE-2011-1149 8120 7.2 http://jvndb.jvn.jp/ja/contents/2011/JVNDB-2011-001678.html 2011-04-21 2011-06-03 View