Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-6569 State: PUBLISHED Published: 2018-02-21T15:00:00 Last Updated: 2024-08-06T07:22:22.423Z Vendors: n/a Products: n/a Problem Types: n/a Description: Race condition in the LoadBalancer module in the Atlassian Floodlight Controller before 1.2 allows remote attackers to cause a denial of service (NULL pointer dereference and thread crash) via a state manipulation attack. Additional Analyst Notes: - CVE Program Container: References: - https://floodlight.atlassian.net/wiki/spaces/floodlightcontroller/pages/24805419/Floodlight+v1.2 - https://github.com/floodlight/floodlight/pull/563 - http://www.securityfocus.com/bid/103132
CVE ID: CVE-2015-6574 State: PUBLISHED Published: 2016-12-15T00:00:00 Last Updated: 2024-08-06T07:22:22.346Z Vendors: n/a Products: n/a Problem Types: n/a Description: The SNAP Lite component in certain SISCO MMS-EASE and AX-S4 ICCP products allows remote attackers to cause a denial of service (CPU consumption) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/95022 - https://www.portcullis-security.com/security-research-and-downloads/security-advisories/cve-2015-6574/ - https://www.sisconet.com/wp-content/uploads/2016/04/SecNote_CVE-2015-6574-Portcullis-20160426.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-22
t/uploads/2016/04/SecNote_CVE-2015-6574-Portcullis-20160426.pdf - https://cert-portal.siemens.com/productcert/pdf/ssa-223771.pdf
CVE ID: CVE-2015-6575 State: PUBLISHED Published: 2015-10-01T00:00:00 Last Updated: 2024-08-06T07:22:22.370Z Vendors: n/a Products: n/a Problem Types: n/a Description: SampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I does not properly consider integer promotion, which allows remote attackers to execute arbitrary code or cause a denial of service (integer overflow and memory corruption) via crafted atoms in MP4 data, aka internal bug 20139950, a different vulnerability than CVE-2015-1538. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-7915, CVE-2014-7916, and/or CVE-2014-7917. Additional Analyst Notes: - CVE Program Container: References: - https://a
14-7915, CVE-2014-7916, and/or CVE-2014-7917. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/frameworks/av/+/cf1581c66c2ad8c5b1aaca2e43e350cf5974f46d - https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ
CVE ID: CVE-2015-6576 State: PUBLISHED Published: 2017-10-02T18:00:00 Last Updated: 2024-08-06T07:22:22.274Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bamboo 2.2 before 5.8.5 and 5.9.x before 5.9.7 allows remote attackers with access to the Bamboo web interface to execute arbitrary Java code via an unspecified resource. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/archive/1/536747/100/0/threaded - https://confluence.atlassian.com/x/Hw7RLg - https://jira.atlassian.com/browse/BAM-16439 - http://packetstormsecurity.com/files/134065/Bamboo-Java-Code-Execution.html
CVE ID: CVE-2015-6580 State: PUBLISHED Published: 2015-09-03T22:00:00 Last Updated: 2024-08-06T07:22:22.258Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple unspecified vulnerabilities in Google V8 before 4.5.103.29, as used in Google Chrome before 45.0.2454.85, allow attackers to cause a denial of service or possibly have other impact via unknown vectors. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2015/09/stable-channel-update.html - http://www.securitytracker.com/id/1033472
CVE ID: CVE-2015-6581 State: PUBLISHED Published: 2015-09-03T22:00:00 Last Updated: 2024-08-06T07:22:22.421Z Vendors: n/a Products: n/a Problem Types: n/a Description: Double free vulnerability in the opj_j2k_copy_default_tcp_and_create_tcd function in j2k.c in OpenJPEG before r3002, as used in PDFium in Google Chrome before 45.0.2454.85, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) by triggering a memory-allocation failure. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2015/09/stable-channel-update.html - http://www.securitytracker.com/id/1033472 - https://code.google.com/p
.blogspot.com/2015/09/stable-channel-update.html - http://www.securitytracker.com/id/1033472 - https://code.google.com/p/chromium/issues/detail?id=486538 - https://code.google.com/p/chromium/issues/detail?id=526825 - https://code.google.com/p/openjpeg/issues/detail?id=492 - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/169258.html - http://lists.fedoraproject.org/pipermail/package-announce/2015-October/168736.html - http://www.debian.org/security/2016/dsa-3665
CVE ID: CVE-2015-6582 State: PUBLISHED Published: 2015-09-03T22:00:00 Last Updated: 2024-08-06T07:22:22.410Z Vendors: n/a Products: n/a Problem Types: n/a Description: The decompose function in platform/transforms/TransformationMatrix.cpp in Blink, as used in Google Chrome before 45.0.2454.85, does not verify that a matrix inversion succeeded, which allows remote attackers to cause a denial of service (uninitialized memory access and application crash) or possibly have unspecified other impact via a crafted web site. Additional Analyst Notes: - CVE Program Container: References: - http://src.chromium.org/viewvc/blink?view=revision&revision=195670 - http://googlechromereleases.blogspot.com/20
nces: - http://src.chromium.org/viewvc/blink?view=revision&revision=195670 - http://googlechromereleases.blogspot.com/2015/09/stable-channel-update.html - http://www.securitytracker.com/id/1033472 - https://code.google.com/p/chromium/issues/detail?id=469247 - https://code.google.com/p/chromium/issues/detail?id=526825
CVE ID: CVE-2015-6583 State: PUBLISHED Published: 2015-09-03T22:00:00 Last Updated: 2024-08-06T07:22:22.454Z Vendors: n/a Products: n/a Problem Types: n/a Description: Google Chrome before 45.0.2454.85 does not display a location bar for a hosted app's window after navigation away from the installation site, which might make it easier for remote attackers to spoof content via a crafted app, related to browser.cc and hosted_app_browser_controller.cc. Additional Analyst Notes: - CVE Program Container: References: - http://googlechromereleases.blogspot.com/2015/09/stable-channel-update.html - http://www.securitytracker.com/id/1033472 - https://codereview.chromium.org/1164873003/ - https://code.
el-update.html - http://www.securitytracker.com/id/1033472 - https://codereview.chromium.org/1164873003/ - https://code.google.com/p/chromium/issues/detail?id=526825 - https://code.google.com/p/chromium/issues/detail?id=467844
CVE ID: CVE-2015-6584 State: PUBLISHED Published: 2015-09-11T15:00:00 Last Updated: 2024-08-06T07:22:22.250Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the DataTables plugin 1.10.8 and earlier for jQuery allows remote attackers to inject arbitrary web script or HTML via the scripts parameter to media/unit_testing/templates/6776.php. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/133555/DataTables-1.10.8-Cross-Site-Scripting.html - http://www.securityfocus.com/archive/1/536437/100/0/threaded - https://www.netsparker.com/cve-2015-6384-xss-vulnerability-identified-in-datatables/ -
rchive/1/536437/100/0/threaded - https://www.netsparker.com/cve-2015-6384-xss-vulnerability-identified-in-datatables/ - http://seclists.org/fulldisclosure/2015/Sep/37
CVE ID: CVE-2015-6585 State: PUBLISHED Published: 2017-07-25T18:00:00 Last Updated: 2024-08-06T07:22:22.418Z Vendors: n/a Products: n/a Problem Types: n/a Description: hwpapp.dll in Hangul Word Processor allows remote attackers to execute arbitrary code via a crafted heap spray, and by leveraging a "type confusion" via an HWPX file containing a crafted para text tag. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/76694 - https://www.fireeye.com/blog/threat-research/2015/09/zero-day_hwp_exploit.html - http://www.hancom.com/cs_center/csDownload.do - https://www.fireeye.com/content/dam/fireeye-www/global/en/blog/threat-research/FireEye_HWP_Zero
s_center/csDownload.do - https://www.fireeye.com/content/dam/fireeye-www/global/en/blog/threat-research/FireEye_HWP_ZeroDay.pdf
CVE ID: CVE-2015-6586 State: PUBLISHED Published: 2017-05-23T03:56:00 Last Updated: 2024-08-06T07:22:22.243Z Vendors: n/a Products: n/a Problem Types: n/a Description: The mDNS module in Huawei WLAN AC6005, AC6605, and ACU2 devices with software before V200R006C00SPC100 allows remote attackers to obtain sensitive information by leveraging failure to restrict processing of mDNS unicast queries to the link local network. Additional Analyst Notes: - CVE Program Container: References: - http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-453516.htm - http://www.securityfocus.com/bid/76684
CVE ID: CVE-2015-6587 State: PUBLISHED Published: 2015-09-02T10:00:00 Last Updated: 2024-08-06T07:22:22.440Z Vendors: n/a Products: n/a Problem Types: n/a Description: The vlserver in OpenAFS before 1.6.13 allows remote authenticated users to cause a denial of service (out-of-bounds read and crash) via a crafted regular expression in a VL_ListAttributesN2 RPC. Additional Analyst Notes: - CVE Program Container: References: - http://www.openafs.org/pages/security/OPENAFS-SA-2015-006.txt - https://www.openafs.org/dl/openafs/1.6.13/RELNOTES-1.6.13 - http://www.debian.org/security/2015/dsa-3320 - https://lists.openafs.org/pipermail/openafs-announce/2015/000486.html
CVE ID: CVE-2015-6588 State: PUBLISHED Published: 2017-08-29T15:00:00 Last Updated: 2024-08-06T07:22:22.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in login-fsp.html in MODX Revolution before 1.9.1 allows remote attackers to inject arbitrary web script or HTML via the QUERY_STRING. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/134529/MODX-2.3.5-Cross-Site-Scripting.html
CVE ID: CVE-2015-6589 State: PUBLISHED Published: 2020-02-13T20:11:27 Last Updated: 2024-08-06T07:22:22.411Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in Kaseya Virtual System Administrator (VSA) 7.0.0.0 before 7.0.0.33, 8..0.0.0 before 8.0.0.23, 9.0.0.0 before 9.0.0.19, and 9.1.0.0 before 9.1.0.9 allows remote authenticated users to write to and execute arbitrary files due to insufficient restrictions in file paths to json.ashx. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/133782/Kaseya-Virtual-System-Administrator-Code-Execution-Privilege-Escalation.html - http://www.zerodayinitiativ
/files/133782/Kaseya-Virtual-System-Administrator-Code-Execution-Privilege-Escalation.html - http://www.zerodayinitiative.com/advisories/ZDI-15-450 - https://www.exploit-db.com/exploits/38351/ - https://www.securityfocus.com/bid/76838
CVE ID: CVE-2015-6591 State: PUBLISHED Published: 2020-01-15T18:15:22 Last Updated: 2024-08-06T07:22:22.207Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in application/templates/amelia/loadjs.php in Free Reprintables ArticleFR 3.0.7 and earlier allows local users to read arbitrary files via the s parameter. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/134081/articleFR-3.0.7-Arbitrary-File-Read.html
CVE ID: CVE-2015-6592 State: PUBLISHED Published: 2017-09-25T21:00:00 Last Updated: 2024-08-06T07:22:22.368Z Vendors: n/a Products: n/a Problem Types: n/a Description: Huawei UAP2105 before V300R012C00SPC160(BootRom) does not require authentication to the serial port or the VxWorks shell. Additional Analyst Notes: - CVE Program Container: References: - http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-452865.htm - http://www.securityfocus.com/bid/76552
CVE ID: CVE-2015-6593 State: REJECTED Published: 2015-05-30T19:00:00 Last Updated: 2015-05-30T18:57:00 Description: No description available.
CVE ID: CVE-2015-6596 State: PUBLISHED Published: 2015-10-06T17:00:00 Last Updated: 2024-08-06T07:29:22.551Z Vendors: n/a Products: n/a Problem Types: n/a Description: mediaserver in Android before 5.1.1 LMY48T allows attackers to gain privileges via a crafted application, aka internal bugs 20731946 and 20719651, a different vulnerability than CVE-2015-7717. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/message/raw?msg=android-security-updates/_Rm-lKnS2M8/dGTcilt0CAAJ
CVE ID: CVE-2015-6598 State: PUBLISHED Published: 2015-10-06T17:00:00 Last Updated: 2024-08-06T07:29:22.555Z Vendors: n/a Products: n/a Problem Types: n/a Description: libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 23306638. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/message/raw?msg=android-security-updates/_Rm-lKnS2M8/dGTcilt0CAAJ
CVE ID: CVE-2015-6599 State: PUBLISHED Published: 2015-10-06T17:00:00 Last Updated: 2024-08-06T07:29:23.033Z Vendors: n/a Products: n/a Problem Types: n/a Description: libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 23416608. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/message/raw?msg=android-security-updates/_Rm-lKnS2M8/dGTcilt0CAAJ
CVE ID: CVE-2015-6600 State: PUBLISHED Published: 2015-10-06T17:00:00 Last Updated: 2024-08-06T07:29:22.558Z Vendors: n/a Products: n/a Problem Types: n/a Description: libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 22882938. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/message/raw?msg=android-security-updates/_Rm-lKnS2M8/dGTcilt0CAAJ
CVE ID: CVE-2015-6601 State: PUBLISHED Published: 2015-10-06T17:00:00 Last Updated: 2024-08-06T07:29:23.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 22935234. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/message/raw?msg=android-security-updates/_Rm-lKnS2M8/dGTcilt0CAAJ
CVE ID: CVE-2015-6602 State: PUBLISHED Published: 2015-10-02T01:00:00 Last Updated: 2024-08-06T07:29:22.569Z Vendors: n/a Products: n/a Problem Types: n/a Description: libutils in Android through 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted metadata in a (1) MP3 or (2) MP4 file, as demonstrated by an attack against use of libutils by libstagefright in Android 5.x. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033725 - https://blog.zimperium.com/zimperium-zlabs-is-raising-the-volume-new-vulnerability-processing-mp3mp4-media/ - https://threatpost.com/stagefright-2-0-vulnerabilities-affect-1-billion-android-devi
rability-processing-mp3mp4-media/ - https://threatpost.com/stagefright-2-0-vulnerabilities-affect-1-billion-android-devices/114863/ - https://support.silentcircle.com/customer/en/portal/articles/2145864-privatos-1-1-12-release-notes
CVE ID: CVE-2015-6603 State: PUBLISHED Published: 2015-10-06T17:00:00 Last Updated: 2024-08-06T07:29:23.166Z Vendors: n/a Products: n/a Problem Types: n/a Description: libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 23227354. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/message/raw?msg=android-security-updates/_Rm-lKnS2M8/dGTcilt0CAAJ
CVE ID: CVE-2015-6604 State: PUBLISHED Published: 2015-10-06T17:00:00 Last Updated: 2024-08-06T07:29:23.066Z Vendors: n/a Products: n/a Problem Types: n/a Description: libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 23129786. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/message/raw?msg=android-security-updates/_Rm-lKnS2M8/dGTcilt0CAAJ
CVE ID: CVE-2015-6605 State: PUBLISHED Published: 2015-10-06T17:00:00 Last Updated: 2024-08-06T07:29:23.409Z Vendors: n/a Products: n/a Problem Types: n/a Description: mediaserver in Android before 5.1.1 LMY48T allows attackers to cause a denial of service (process crash) via unspecified vectors, aka internal bugs 20915134 and 23142203, a different vulnerability than CVE-2015-7718. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/message/raw?msg=android-security-updates/_Rm-lKnS2M8/dGTcilt0CAAJ
CVE ID: CVE-2015-6606 State: PUBLISHED Published: 2015-10-06T17:00:00 Last Updated: 2024-08-06T07:29:24.690Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Secure Element Evaluation Kit (aka SEEK or SmartCard API) plugin in Android before 5.1.1 LMY48T allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 22301786. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/message/raw?msg=android-security-updates/_Rm-lKnS2M8/dGTcilt0CAAJ
CVE ID: CVE-2015-6607 State: PUBLISHED Published: 2015-10-06T17:00:00 Last Updated: 2024-08-06T07:29:22.603Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQLite before 3.8.9, as used in Android before 5.1.1 LMY48T, allows attackers to gain privileges via a crafted application, aka internal bug 20099586. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/message/raw?msg=android-security-updates/_Rm-lKnS2M8/dGTcilt0CAAJ - http://www.securityfocus.com/bid/76970 - https://android-review.googlesource.com/#/c/145961/
CVE ID: CVE-2015-6608 State: PUBLISHED Published: 2015-11-03T11:00:00 Last Updated: 2024-08-06T07:29:22.630Z Vendors: n/a Products: n/a Problem Types: n/a Description: mediaserver in Android 5.x before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bugs 19779574, 23680780, 23876444, and 23658148, a different vulnerability than CVE-2015-8072 and CVE-2015-8073. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/message/raw?msg=android-security-updates/n1aw2MGce4E/jhpVEWDUCAAJ - http://www.securitytracker.com/id/1034049
CVE ID: CVE-2015-6609 State: PUBLISHED Published: 2015-11-03T11:00:00 Last Updated: 2024-08-06T07:29:22.536Z Vendors: n/a Products: n/a Problem Types: n/a Description: libutils in Android before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted audio file, aka internal bug 22953624. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/message/raw?msg=android-security-updates/n1aw2MGce4E/jhpVEWDUCAAJ - http://www.securitytracker.com/id/1034049
CVE ID: CVE-2015-6610 State: PUBLISHED Published: 2015-11-03T11:00:00 Last Updated: 2024-08-06T07:29:23.767Z Vendors: n/a Products: n/a Problem Types: n/a Description: libstagefright in Android before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows attackers to gain privileges or cause a denial of service (memory corruption) via a crafted application, aka internal bug 23707088. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/message/raw?msg=android-security-updates/n1aw2MGce4E/jhpVEWDUCAAJ - http://www.securitytracker.com/id/1034049
CVE ID: CVE-2015-6611 State: PUBLISHED Published: 2015-11-03T11:00:00 Last Updated: 2024-08-06T07:29:24.617Z Vendors: n/a Products: n/a Problem Types: n/a Description: mediaserver in Android before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows remote attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, via unknown vectors, aka internal bugs 23905951, 23912202, 23953967, 23696300, 23600291, 23756261, 23541506, 23284974, 23542351, and 23542352, a different vulnerability than CVE-2015-8074. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/message/raw?msg=android-security-updates/n1aw2MGce4E/jhpVEW
ram Container: References: - https://groups.google.com/forum/message/raw?msg=android-security-updates/n1aw2MGce4E/jhpVEWDUCAAJ - http://www.securitytracker.com/id/1034049
CVE ID: CVE-2015-6612 State: PUBLISHED Published: 2015-11-03T11:00:00 Last Updated: 2024-08-06T07:29:22.568Z Vendors: n/a Products: n/a Problem Types: n/a Description: libmedia in Android before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows attackers to gain privileges via a crafted application, aka internal bug 23540426. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/message/raw?msg=android-security-updates/n1aw2MGce4E/jhpVEWDUCAAJ - http://www.securitytracker.com/id/1034049
CVE ID: CVE-2015-6613 State: PUBLISHED Published: 2015-11-03T11:00:00 Last Updated: 2024-08-06T07:29:22.562Z Vendors: n/a Products: n/a Problem Types: n/a Description: Bluetooth in Android before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows attackers to send commands to a debugging port, and consequently gain privileges, via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 24371736. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/message/raw?msg=android-security-updates/n1aw2MGce4E/jhpVEWDUCAAJ - http://www.securitytracker.com/id/1034049
CVE ID: CVE-2015-6614 State: PUBLISHED Published: 2015-11-03T11:00:00 Last Updated: 2024-08-06T07:29:23.134Z Vendors: n/a Products: n/a Problem Types: n/a Description: Telephony in Android 5.x before 5.1.1 LMY48X allows attackers to gain privileges, and consequently bypass intended network-interface restrictions, perform expensive data transfers, or cause a denial of service (call-reception outage or mute manipulation), via a crafted application, aka internal bug 21900139. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/message/raw?msg=android-security-updates/n1aw2MGce4E/jhpVEWDUCAAJ - http://www.securitytracker.com/id/1034049
CVE ID: CVE-2015-6616 State: PUBLISHED Published: 2015-12-08T23:00:00 Last Updated: 2024-08-06T07:29:23.018Z Vendors: n/a Products: n/a Problem Types: n/a Description: mediaserver in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bugs 24630158 and 23882800, a different vulnerability than CVE-2015-8505, CVE-2015-8506, and CVE-2015-8507. Additional Analyst Notes: - CVE Program Container: References: - http://source.android.com/security/bulletin/2015-12-01.html