Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2016-0807

EPSS 0.01% · P3
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2016-0807

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
The get_build_id function in elf_utils.cpp in Debuggerd in Android 6.x before 2016-02-01 allows attackers to gain privileges via a crafted application that mishandles a Desc Size element in an ELF Note, aka internal bug 25187394.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Android Debuggerd 提权漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Android是美国谷歌(Google)公司和开放手持设备联盟(简称OHA)共同开发的一套以Linux为基础的开源操作系统。Debuggerd是其中的一个系统启动进程组件。 Android 2016-02-01之前6.x版本的Debuggerd中的elf_utils.cpp文件中的‘get_build_id函数存在安全漏洞。攻击者可借助特制的应用程序(未正确处理ELF Note中的Desc Size元素)利用该漏洞获取权限。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2016-0807

#POC DescriptionSource LinkShenlong Link
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2016-0807

Please Login to view more intelligence information

Same Patch Batch · n/a · 2016-02-07 · 20 CVEs total

CVE-2016-0803Android mediaserver 安全漏洞
CVE-2016-0813Android Setup Wizard 安全漏洞
CVE-2016-0812Android Setup Wizard 安全漏洞
CVE-2016-0811Android libmediaplayerservice 整数溢出漏洞
CVE-2016-0810Android mediaserver 提权漏洞
CVE-2016-0809Android Wi-Fi 释放后重用漏洞
CVE-2016-0808Android Minikin库整数溢出漏洞
CVE-2016-0806Android Qualcomm WiFi Driver 提权漏洞
CVE-2016-0805Android 提权漏洞
CVE-2016-0804Android mediaserver 安全漏洞
CVE-2015-6398Cisco Nexus 9000 Application Centric Infrastructure Mode 拒绝服务漏洞
CVE-2016-0802Android kernel 安全漏洞
CVE-2016-0801Android kernel 安全漏洞
CVE-2016-1309Cisco WebEx Meetings Server 跨站脚本漏洞
CVE-2016-1308Cisco Unified Communications Manager SQL注入漏洞
CVE-2016-1307Cisco Finesse Desktop和Unified Contact Center Express 安全漏洞
CVE-2016-1305Cisco Application Policy Infrastructure Controller Enterprise Module 跨站脚本漏洞
CVE-2016-1302Cisco Application Policy Infrastructure Controller和Nexus 9000 ACI Mode Switches 安全漏洞
CVE-2016-1301Cisco ASA-CX Content-Aware Security software和Cisco Prime Security Manager 安全漏洞

IV. Related Vulnerabilities

V. Comments for CVE-2016-0807

No comments yet


Leave a comment