Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-3808 State: PUBLISHED Published: 2015-05-26T15:00:00 Last Updated: 2024-08-06T05:56:15.486Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dissect_lbmr_pser function in epan/dissectors/packet-lbmr.c in the LBMR dissector in Wireshark 1.12.x before 1.12.5 does not reject a zero length, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.wireshark.org/security/wnpa-sec-2015-12.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11036 - https://security.gentoo.org/glsa/201510-03 - https://code.wireshark.org/review/gitweb?p=wireshark.git
bug.cgi?id=11036 - https://security.gentoo.org/glsa/201510-03 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=c19860dba8d158c42865c3d9051b6f318cb41169 - http://www.securityfocus.com/bid/74628
CVE ID: CVE-2015-3809 State: PUBLISHED Published: 2015-05-26T15:00:00 Last Updated: 2024-08-06T05:56:15.864Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dissect_lbmr_pser function in epan/dissectors/packet-lbmr.c in the LBMR dissector in Wireshark 1.12.x before 1.12.5 does not properly track the current offset, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.wireshark.org/security/wnpa-sec-2015-12.html - http://www.debian.org/security/2015/dsa-3277 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11036 - http://www.securityfocus.com/bid/74632 -
ty/2015/dsa-3277 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11036 - http://www.securityfocus.com/bid/74632 - https://security.gentoo.org/glsa/201510-03 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=c19860dba8d158c42865c3d9051b6f318cb41169
CVE ID: CVE-2015-3810 State: PUBLISHED Published: 2015-05-26T15:00:00 Last Updated: 2024-08-06T05:56:15.737Z Vendors: n/a Products: n/a Problem Types: n/a Description: epan/dissectors/packet-websocket.c in the WebSocket dissector in Wireshark 1.12.x before 1.12.5 uses a recursive algorithm, which allows remote attackers to cause a denial of service (CPU consumption) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/74629 - http://www.debian.org/security/2015/dsa-3277 - http://www.wireshark.org/security/wnpa-sec-2015-13.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=10989 - http://www.oracle.com/technetwork/topi
pa-sec-2015-13.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=10989 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - https://security.gentoo.org/glsa/201510-03 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=4ee6bcbd2e03a25f1e6b0239558d9edeaf8040c0
CVE ID: CVE-2015-3811 State: PUBLISHED Published: 2015-05-26T15:00:00 Last Updated: 2024-08-06T05:56:15.673Z Vendors: n/a Products: n/a Problem Types: n/a Description: epan/dissectors/packet-wcp.c in the WCP dissector in Wireshark 1.10.x before 1.10.14 and 1.12.x before 1.12.5 improperly refers to previously processed bytes, which allows remote attackers to cause a denial of service (application crash) via a crafted packet, a different vulnerability than CVE-2015-2188. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2017-0631.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=10978 - http://www.debian.org/security/2015/dsa-3277 - htt
31.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=10978 - http://www.debian.org/security/2015/dsa-3277 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=a6fc6aa0b4efc1a1c3d7a2e3b5189e888fb6ccc2 - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - https://security.gentoo.org/glsa/201510-03 - http://www.wireshark.org/security/wnpa-sec-2015-14.html
CVE ID: CVE-2015-3812 State: PUBLISHED Published: 2015-05-26T15:00:00 Last Updated: 2024-08-06T05:56:15.487Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple memory leaks in the x11_init_protocol function in epan/dissectors/packet-x11.c in the X11 dissector in Wireshark 1.10.x before 1.10.14 and 1.12.x before 1.12.5 allow remote attackers to cause a denial of service (memory consumption) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - http://rhn.redhat.com/errata/RHSA-2017-0631.html - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b8ccc2a6add29823a0ff0492fc50372449007e7b - http://www.debian.org/security/2015/d
w/gitweb?p=wireshark.git%3Ba=commit%3Bh=b8ccc2a6add29823a0ff0492fc50372449007e7b - http://www.debian.org/security/2015/dsa-3277 - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11088 - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - https://security.gentoo.org/glsa/201510-03 - http://www.securityfocus.com/bid/74637 - http://www.wireshark.org/security/wnpa-sec-2015-15.html
CVE ID: CVE-2015-3813 State: PUBLISHED Published: 2015-05-26T15:00:00 Last Updated: 2024-08-06T05:56:15.468Z Vendors: n/a Products: n/a Problem Types: n/a Description: The fragment_add_work function in epan/reassemble.c in the packet-reassembly feature in Wireshark 1.12.x before 1.12.5 does not properly determine the defragmentation state in a case of an insufficient snapshot length, which allows remote attackers to cause a denial of service (memory consumption) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=c35f2ccb4433718416551cc7a85afb0860529d57 - http://rhn.redhat.com/errata/RH
/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=c35f2ccb4433718416551cc7a85afb0860529d57 - http://rhn.redhat.com/errata/RHSA-2017-0631.html - http://www.debian.org/security/2015/dsa-3277 - http://www.wireshark.org/security/wnpa-sec-2015-16.html - http://www.oracle.com/technetwork/topics/security/linuxbulletinoct2015-2719645.html - http://www.securityfocus.com/bid/74633 - https://security.gentoo.org/glsa/201510-03 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11129
CVE ID: CVE-2015-3814 State: PUBLISHED Published: 2015-05-26T15:00:00 Last Updated: 2024-08-06T05:56:15.680Z Vendors: n/a Products: n/a Problem Types: n/a Description: The (1) dissect_tfs_request and (2) dissect_tfs_response functions in epan/dissectors/packet-ieee80211.c in the IEEE 802.11 dissector in Wireshark 1.10.x before 1.10.14 and 1.12.x before 1.12.5 interpret a zero value as a length rather than an error condition, which allows remote attackers to cause a denial of service (infinite loop) via a crafted packet. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11110 - https://code.wireshark.org/review/gitweb?p=wiresh
erences: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11110 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=e243b0041328980a9bbd43bb8a8166d7422f9096 - http://www.debian.org/security/2015/dsa-3277 - http://www.wireshark.org/security/wnpa-sec-2015-17.html - http://www.oracle.com/technetwork/topics/security/bulletinapr2015-2511959.html - https://security.gentoo.org/glsa/201510-03 - http://www.securityfocus.com/bid/74631
CVE ID: CVE-2015-3815 State: PUBLISHED Published: 2015-05-26T15:00:00 Last Updated: 2024-08-06T05:56:15.473Z Vendors: n/a Products: n/a Problem Types: n/a Description: The detect_version function in wiretap/logcat.c in the Android Logcat file parser in Wireshark 1.12.x before 1.12.5 does not check the length of the payload, which allows remote attackers to cause a denial of service (out-of-bounds read and application crash) via a packet with a crafted payload, as demonstrated by a length of zero, a different vulnerability than CVE-2015-3906. Additional Analyst Notes: - CVE Program Container: References: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11188 - http://www.debian.org/secur
Program Container: References: - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=11188 - http://www.debian.org/security/2015/dsa-3277 - http://www.securityfocus.com/bid/74630 - http://www.wireshark.org/security/wnpa-sec-2015-18.html - https://blog.fuzzing-project.org/11-Read-heap-overflow-invalid-memory-access-in-Wireshark-TFPA-0072015.html - https://security.gentoo.org/glsa/201510-03 - https://code.wireshark.org/review/gitweb?p=wireshark.git%3Ba=commit%3Bh=b3b1f7c3aa2233a147294bad833b748d38fba84d
CVE ID: CVE-2015-3823 State: PUBLISHED Published: 2015-10-06T17:00:00 Last Updated: 2024-08-06T05:56:15.620Z Vendors: n/a Products: n/a Problem Types: n/a Description: libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 21335999. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/message/raw?msg=android-security-updates/_Rm-lKnS2M8/dGTcilt0CAAJ
CVE ID: CVE-2015-3824 State: PUBLISHED Published: 2015-10-01T00:00:00 Last Updated: 2024-08-06T05:56:15.553Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I does not properly restrict size addition, which allows remote attackers to execute arbitrary code or cause a denial of service (integer overflow and memory corruption) via a crafted MPEG-4 tx3g atom, aka internal bug 20923261. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033094 - http://www.securityfocus.com/bid/76052 - http://www1.huawei.com/en/security/psirt/sec
w.securitytracker.com/id/1033094 - http://www.securityfocus.com/bid/76052 - http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-448928.htm - http://www.huawei.com/en/psirt/security-advisories/hw-448928 - https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ - https://android.googlesource.com/platform/frameworks/av/+/463a6f807e187828442949d1924e143cf07778c6
CVE ID: CVE-2015-3825 State: REJECTED Published: 2016-02-18T23:00:00 Last Updated: 2016-02-18T22:57:01 Description: No description available.
CVE ID: CVE-2015-3826 State: PUBLISHED Published: 2015-10-01T00:00:00 Last Updated: 2024-08-06T05:56:15.796Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MPEG4Extractor::parse3GPPMetaData function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I does not enforce a minimum size for UTF-16 strings containing a Byte Order Mark (BOM), which allows remote attackers to cause a denial of service (integer underflow, buffer over-read, and mediaserver process crash) via crafted 3GPP metadata, aka internal bug 20923261, a related issue to CVE-2015-3828. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033094 - ht
15-3828. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033094 - http://www.securityfocus.com/bid/76052 - http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-448928.htm - https://android.googlesource.com/platform/frameworks/av/+/f4f7e0c102819f039ebb1972b3dba1d3186bc1d1 - http://www.huawei.com/en/psirt/security-advisories/hw-448928 - https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ
CVE ID: CVE-2015-3827 State: PUBLISHED Published: 2015-10-01T00:00:00 Last Updated: 2024-08-06T05:56:15.490Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I does not validate the relationship between chunk sizes and skip sizes, which allows remote attackers to execute arbitrary code or cause a denial of service (integer underflow and memory corruption) via crafted MPEG-4 covr atoms, aka internal bug 20923261. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033094 - http://www.securityfocus.com/bid/76052 - http://www1.hua
iner: References: - http://www.securitytracker.com/id/1033094 - http://www.securityfocus.com/bid/76052 - http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-448928.htm - http://www.huawei.com/en/psirt/security-advisories/hw-448928 - https://android.googlesource.com/platform/frameworks/av/+/f4a88c8ed4f8186b3d6e2852993e063fc33ff231 - https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ
CVE ID: CVE-2015-3828 State: PUBLISHED Published: 2015-10-01T00:00:00 Last Updated: 2024-08-06T05:56:15.704Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MPEG4Extractor::parse3GPPMetaData function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I does not enforce a minimum size for UTF-16 strings containing a Byte Order Mark (BOM), which allows remote attackers to execute arbitrary code or cause a denial of service (integer underflow and memory corruption) via crafted 3GPP metadata, aka internal bug 20923261, a related issue to CVE-2015-3826. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033094 - htt
5-3826. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033094 - http://www.securityfocus.com/bid/76052 - http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-448928.htm - https://android.googlesource.com/platform/frameworks/av/+/f4f7e0c102819f039ebb1972b3dba1d3186bc1d1 - http://www.huawei.com/en/psirt/security-advisories/hw-448928 - https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ
CVE ID: CVE-2015-3829 State: PUBLISHED Published: 2015-10-01T00:00:00 Last Updated: 2024-08-06T05:56:15.459Z Vendors: n/a Products: n/a Problem Types: n/a Description: Off-by-one error in the MPEG4Extractor::parseChunk function in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I allows remote attackers to execute arbitrary code or cause a denial of service (integer overflow and memory corruption) via crafted MPEG-4 covr atoms with a size equal to SIZE_MAX, aka internal bug 20923261. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033094 - http://www.securityfocus.com/bid/76052 - https://android.googlesource.com/platform/f
ww.securitytracker.com/id/1033094 - http://www.securityfocus.com/bid/76052 - https://android.googlesource.com/platform/frameworks/av/+/2674a7218eaa3c87f2ee26d26da5b9170e10f859 - http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-448928.htm - http://www.huawei.com/en/psirt/security-advisories/hw-448928 - https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ
CVE ID: CVE-2015-3830 State: PUBLISHED Published: 2017-06-06T18:00:00 Last Updated: 2024-08-06T05:56:15.682Z Vendors: n/a Products: n/a Problem Types: n/a Description: The stock Android browser address bar in all Android operating systems suffers from Address Bar Spoofing, which allows remote attackers to trick a victim by displaying a malicious page for legitimate domain names. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/CHEF-KOCH/Android-Vulnerabilities-Overview/blob/master/2015.md - https://jsfiddle.net/dy4swq4o/
CVE ID: CVE-2015-3831 State: PUBLISHED Published: 2015-10-01T00:00:00 Last Updated: 2024-08-06T05:56:15.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the readAt function in BpMediaHTTPConnection in media/libmedia/IMediaHTTPConnection.cpp in the mediaserver service in Android before 5.1.1 LMY48I allows attackers to execute arbitrary code via a crafted application, aka internal bug 19400722. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ - https://android.googlesource.com/platform/frameworks/av/+/51504928746edff6c94a1c498cf99c0a83bedaed
CVE ID: CVE-2015-3832 State: PUBLISHED Published: 2015-10-01T00:00:00 Last Updated: 2024-08-06T05:56:15.803Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple buffer overflows in MPEG4Extractor.cpp in libstagefright in Android before 5.1.1 LMY48I allow remote attackers to execute arbitrary code via invalid size values of NAL units in MP4 data, aka internal bug 19641538. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/frameworks/av/+/d48f0f145f8f0f4472bc0af668ac9a8bce44ba9b - https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ
CVE ID: CVE-2015-3833 State: PUBLISHED Published: 2015-10-01T00:00:00 Last Updated: 2024-08-06T05:56:15.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: The getRunningAppProcesses function in services/core/java/com/android/server/am/ActivityManagerService.java in Android before 5.1.1 LMY48I allows attackers to bypass intended getRecentTasks restrictions and discover the name of the foreground application via a crafted application, aka internal bug 20034603. Additional Analyst Notes: - CVE Program Container: References: - http://stackoverflow.com/questions/24625936/getrunningtasks-doesnt-work-in-android-l - https://groups.google.com/forum/message/raw?msg=android-security-update
25936/getrunningtasks-doesnt-work-in-android-l - https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ - https://android.googlesource.com/platform/frameworks/base/+/aaa0fee0d7a8da347a0c47cef5249c70efee209e
CVE ID: CVE-2015-3834 State: PUBLISHED Published: 2015-10-01T00:00:00 Last Updated: 2024-08-06T05:56:15.871Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer overflows in the BnHDCP::onTransact function in media/libmedia/IHDCP.cpp in libstagefright in Android before 5.1.1 LMY48I allow attackers to execute arbitrary code via a crafted application that uses HDCP encryption, leading to a heap-based buffer overflow, aka internal bug 20222489. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/frameworks/av/+/c82e31a7039a03dca7b37c65b7890ba5c1e18ced - https://groups.google.com/forum/message/raw?msg=android-security
meworks/av/+/c82e31a7039a03dca7b37c65b7890ba5c1e18ced - https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ
CVE ID: CVE-2015-3835 State: PUBLISHED Published: 2015-10-01T00:00:00 Last Updated: 2024-08-06T05:56:15.943Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the OMXNodeInstance::emptyBuffer function in omx/OMXNodeInstance.cpp in libstagefright in Android before 5.1.1 LMY48I allows attackers to execute arbitrary code via a crafted application, aka internal bug 20634516. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/frameworks/av/+/086d84f45ab7b64d1a7ed7ac8ba5833664a6a5ab - https://android.googlesource.com/platform/frameworks/av/+/3cb1b6944e776863aea316e25fdc16d7f9962902 - https://groups.google.com/forum
oid.googlesource.com/platform/frameworks/av/+/3cb1b6944e776863aea316e25fdc16d7f9962902 - https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ
CVE ID: CVE-2015-3836 State: PUBLISHED Published: 2015-10-01T00:00:00 Last Updated: 2024-08-06T05:56:15.879Z Vendors: n/a Products: n/a Problem Types: n/a Description: The Parse_wave function in arm-wt-22k/lib_src/eas_mdls.c in the Sonivox DLS-to-EAS converter in Android before 5.1.1 LMY48I does not reject a negative value for a certain size field, which allows remote attackers to execute arbitrary code or cause a denial of service (buffer overflow) via crafted XMF data, aka internal bug 21132860. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/external/sonivox/+/e999f077f6ef59d20282f1e04786816a31fb8be6 - https://groups.google.com/fo
oid.googlesource.com/platform/external/sonivox/+/e999f077f6ef59d20282f1e04786816a31fb8be6 - https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ
CVE ID: CVE-2015-3837 State: PUBLISHED Published: 2015-10-01T00:00:00 Last Updated: 2024-08-06T05:56:16.302Z Vendors: n/a Products: n/a Problem Types: n/a Description: The OpenSSLX509Certificate class in org/conscrypt/OpenSSLX509Certificate.java in Android before 5.1.1 LMY48I improperly includes certain context data during serialization and deserialization, which allows attackers to execute arbitrary code via an application that sends a crafted Intent, aka internal bug 21437603. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/external/conscrypt/+/edf7055461e2d7fa18de5196dca80896a56e3540 - https://groups.google.com/forum/message/raw?m
m/platform/external/conscrypt/+/edf7055461e2d7fa18de5196dca80896a56e3540 - https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ
CVE ID: CVE-2015-3839 State: PUBLISHED Published: 2017-08-07T17:00:00 Last Updated: 2024-08-06T05:56:16.304Z Vendors: n/a Products: n/a Problem Types: n/a Description: The updateMessageStatus function in Android 5.1.1 and earlier allows local users to cause a denial of service (NULL pointer exception and process crash). Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/100158 - http://blog.trendmicro.com/trendlabs-security-intelligence/two-new-android-bugs-mess-up-messaging-may-lead-to-multiple-send-charges/ - http://blog.trendmicro.com/trendlabs-security-intelligence/os-x-zero-days-on-the-rise-a-2015-midyear-review-on-advanced-attack-surfaces/
dmicro.com/trendlabs-security-intelligence/os-x-zero-days-on-the-rise-a-2015-midyear-review-on-advanced-attack-surfaces/ - https://huntcve.github.io/2017/02/13/cveupdate/
CVE ID: CVE-2015-3840 State: PUBLISHED Published: 2017-06-27T20:00:00 Last Updated: 2024-08-06T05:56:15.904Z Vendors: n/a Products: n/a Problem Types: n/a Description: The MessageStatusReceiver service in the AndroidManifest.XML in Android 5.1.1 and earlier allows local users to alter sent/received statuses of SMS and MMS messages without the associated "WRITE_SMS" permission. Additional Analyst Notes: - CVE Program Container: References: - http://blog.trendmicro.com/trendlabs-security-intelligence/two-new-android-bugs-mess-up-messaging-may-lead-to-multiple-send-charges/ - http://blog.trendmicro.com/trendlabs-security-intelligence/os-x-zero-days-on-the-rise-a-2015-midyear-review-on-advanced-
http://blog.trendmicro.com/trendlabs-security-intelligence/os-x-zero-days-on-the-rise-a-2015-midyear-review-on-advanced-attack-surfaces/ - https://huntcve.github.io/2017/02/13/cveupdate/
CVE ID: CVE-2015-3842 State: PUBLISHED Published: 2015-10-01T00:00:00 Last Updated: 2024-08-06T05:56:16.289Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple heap-based buffer overflows in libeffects in the Audio Policy Service in mediaserver in Android before 5.1.1 LMY48I allow attackers to execute arbitrary code via a crafted application, aka internal bug 21953516. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/frameworks/av/+/aeea52da00d210587fb3ed895de3d5f2e0264c88 - https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ