NVD

Id
949  
Name
CVE-2008-0986  
Description
Integer overflow in the BMP::readFromStream method in the libsgl.so library in Google Android SDK m3-rc37a and earlier, and m5-rc14, allows remote attackers to execute arbitrary code via a crafted BMP file with a header containing a negative offset field.  
Reject
 
CVSS Version
2  
CVSS Score
7.5  
Severity
High  
CVSS Base Score
7.5  
CVSS Impact Subscore
6.4  
CVSS Exploit Subscore
10  
CVSS Vector
(AV:N/AC:L/Au:N/C:P/I:P/A:P)  
Pub Date
2017-01-03  
Published
2008-03-05  
Modified Date
2008-09-05  
Seq
2008-0986  

Actions

Related NVD References

Id NVD Id NVD No. Reference Actions
5757 949 CVE-2008-0986 http://android-developers.blogspot.com/2008/03/android-sdk-update-m5-rc15-released.html  View
5758 949 CVE-2008-0986 3727  View
5759 949 CVE-2008-0986 http://www.coresecurity.com/?action=item&id=2148  View
5760 949 CVE-2008-0986 20080304 CORE-2008-0124: Multiple vulnerabilities in Google"s Android SDK  View
5761 949 CVE-2008-0986 28006  View
5762 949 CVE-2008-0986 androidsdk-bmpreadfromstream-int-overflow(40999)  View

Related JVN

Id Name Title Summary Cveinfo Name Cveinfo Id Nvdinfo Name Nvdinfo Id Cvssv2 Cvssv3 Jvnurl Published Date Last Updated Date Actions
47198 JVNDB-2008-002508 Google Android SDK の BMP::readFromStream メソッドにおける整数オーバーフロー脆弱性 Google Android SDK の libsgl.so ライブラリ内にある BMP::readFromStream メソッドには、整数オーバーフローの脆弱性が存在します。 CVE-2008-0986 31099 CVE-2008-0986 949 7.5 http://jvndb.jvn.jp/ja/contents/2008/JVNDB-2008-002508.html 2008-03-06 2011-03-01 View