NVD

Id
84174  
Name
CVE-2017-0554  
Description
An elevation of privilege vulnerability in the Telephony component could enable a local malicious application to access capabilities outside of its permission levels. This issue is rated as Moderate because it could be used to gain access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33815946.  
Reject
 
CVSS Version
2  
CVSS Score
6.8  
Severity
Medium  
CVSS Base Score
6.8  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
8.6  
CVSS Vector
(AV:N/AC:M/Au:N/C:P/I:P/A:P)  
Pub Date
2017-07-18  
Published
2017-04-07  
Modified Date
2017-07-10  
Seq
2017-0554  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
412845 84174 CVE-2017-6827 https://blogs.gentoo.org/ago/2017/02/20/audiofile-heap-based-buffer-overflow-in-msadpcminitializecoefficients-msadpcm-cpp/  View
412846 84174 CVE-2017-6827 https://blogs.gentoo.org/ago/2017/02/20/audiofile-heap-based-buffer-overflow-in-msadpcminitializecoefficients-msadpcm-cpp/  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
66615 JVNDB-2017-002940 Android の Telephony コンポーネントにおける権限を昇格される脆弱性 Android の Telephony コンポーネントには、権限を昇格される脆弱性が存在します。 CVE-2017-0554 0 CVE-2017-0554 84174 6.8 7.8 http://jvndb.jvn.jp/ja/contents/2017/JVNDB-2017-002940.html 2017-04-03 2017-05-09 View