NVD

Id
88296  
Name
CVE-2014-7954  
Description
Directory traversal vulnerability in the doSendObjectInfo method in frameworks/av/media/mtp/MtpServer.cpp in Android 4.4.4 allows physically proximate attackers with a direct connection to the target Android device to upload files outside of the sdcard via a .. (dot dot) in a name parameter of an MTP request.  
Reject
 
CVSS Version
2  
CVSS Score
2.1  
Severity
Low  
CVSS Base Score
2.1  
CVSS Impact Subscore
2.9  
CVSS Exploit Subscore
3.9  
CVSS Vector
(AV:L/AC:L/Au:N/C:N/I:P/A:N)  
Pub Date
2017-07-18  
Published
2017-07-07  
Modified Date
2017-07-12  
Seq
2014-7954  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
428785 88296 CVE-2017-2828 99184  View
428786 88296 CVE-2017-2828 https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0329  View
428787 88296 CVE-2017-2828 99184  View
428788 88296 CVE-2017-2828 https://www.talosintelligence.com/vulnerability_reports/TALOS-2017-0329  View
430879 88296 CVE-2017-10745 https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10745  View
430880 88296 CVE-2017-10745 https://github.com/wlinzi/security_advisories/tree/master/CVE-2017-10745  View

Related JVN