NVD

Id
88295  
Name
CVE-2014-7953  
Description
Race condition in the bindBackupAgent method in the ActivityManagerService in Android 4.4.4 allows local users with adb shell access to execute arbitrary code or any valid package as system by running pm install with the target apk, and simultaneously running a crafted script to process logcat's output looking for a dexopt line, which once found should execute bindBackupAgent with the uid member of the ApplicationInfo parameter set to 1000.  
Reject
 
CVSS Version
2  
CVSS Score
6.9  
Severity
Medium  
CVSS Base Score
6.9  
CVSS Impact Subscore
10  
CVSS Exploit Subscore
3.4  
CVSS Vector
(AV:L/AC:M/Au:N/C:C/I:C/A:C)  
Pub Date
2017-07-18  
Published
2017-07-07  
Modified Date
2017-07-13  
Seq
2014-7953  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
428781 88295 CVE-2017-2827 99184  View
428782 88295 CVE-2017-2827 https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0328  View
428783 88295 CVE-2017-2827 99184  View
428784 88295 CVE-2017-2827 https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0328  View
430877 88295 CVE-2017-10744 https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10744  View
430878 88295 CVE-2017-10744 https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10744  View

Related JVN