CVE-2012-6422
Publicada em · Atualizada em
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 15%
probabilidade de exploração
15%top 3% das CVEs
exploração observada
nãonenhuma fonte reporta
The kernel in Samsung Galaxy S2, Galaxy Note 2, MEIZU MX, and possibly other Android devices, when running an Exynos 4210 or 4412 processor, uses weak permissions (0666) for /dev/exynos-mem, which allows attackers to read or write arbitrary physical memory and gain privileges via a crafted application, as demonstrated by ExynosAbuse.
Produtos afetados
n/a · n/aReferências
http://arstechnica.com/security/2012/12/developer-warns-of-critical-vulnerability-in-many-samsung-smartphones/http://forum.xda-developers.com/showthread.php?p=35469999http://forum.xda-developers.com/showthread.php?t=2051290http://osvdb.org/88467http://project-voodoo.org/articles/instant-fix-app-for-exynos-mem-abuse-vulnerability-no-root-required-reversiblehttp://www.sammobile.com/2012/12/16/major-vulnerability-found-on-exynos-4-devices/http://www.securityweek.com/new-vulnerability-exposed-samsungs-android-devices