Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2015-1489 State: PUBLISHED Published: 2015-08-01T01:00:00 Last Updated: 2024-08-06T04:47:16.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: The management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticated users to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://www.exploit-db.com/exploits/37812/ - http://www.securityfocus.com/bid/76078 - http://www.securitytracker.com/id/1033165 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150730_00
CVE ID: CVE-2015-1490 State: PUBLISHED Published: 2015-08-01T01:00:00 Last Updated: 2024-08-06T04:47:16.818Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticated users to read arbitrary files via a relative pathname in a client installation package. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id/1033165 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150730_00 - http://www.securityfocus.com/bid/760
es/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150730_00 - http://www.securityfocus.com/bid/76081
CVE ID: CVE-2015-1491 State: PUBLISHED Published: 2015-08-01T01:00:00 Last Updated: 2024-08-06T04:47:17.524Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the management console in Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP1 allows remote authenticated users to execute arbitrary SQL commands via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/76079 - http://www.securitytracker.com/id/1033165 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150730_00
CVE ID: CVE-2015-1492 State: PUBLISHED Published: 2015-08-01T01:00:00 Last Updated: 2024-08-06T04:47:16.230Z Vendors: n/a Products: n/a Problem Types: n/a Description: Untrusted search path vulnerability in the client in Symantec Endpoint Protection 12.1 before 12.1-RU6-MP1 allows local users to gain privileges via a Trojan horse DLL in a client install package. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/76083 - http://www.securitytracker.com/id/1033165 - http://www.symantec.com/security_response/securityupdates/detail.jsp?fid=security_advisory&pvid=security_advisory&year=&suid=20150730_00
CVE ID: CVE-2015-1493 State: PUBLISHED Published: 2015-06-01T19:00:00 Last Updated: 2024-08-06T04:47:16.878Z Vendors: n/a Products: n/a Problem Types: n/a Description: Directory traversal vulnerability in the min_get_slash_argument function in lib/configonlylib.php in Moodle through 2.5.9, 2.6.x before 2.6.8, 2.7.x before 2.7.5, and 2.8.x before 2.8.3 allows remote authenticated users to read arbitrary files via a .. (dot dot) in the file parameter, as demonstrated by reading PHP scripts. Additional Analyst Notes: - CVE Program Container: References: - http://openwall.com/lists/oss-security/2015/02/09/2 - http://openwall.com/lists/oss-security/2015/02/04/15 - http://git.moodle.org/gw?p=moodl
ists/oss-security/2015/02/09/2 - http://openwall.com/lists/oss-security/2015/02/04/15 - http://git.moodle.org/gw?p=moodle.git%3Ba=commit%3Bh=af9a7937cc085f96bdbc4724cadec6eeae0242fc - http://git.moodle.org/gw?p=moodle.git&a=search&h=HEAD&st=commit&s=MDL-48980 - https://moodle.org/mod/forum/discuss.php?d=279956
CVE ID: CVE-2015-1494 State: PUBLISHED Published: 2015-02-17T15:00:00 Last Updated: 2024-08-06T04:47:16.217Z Vendors: n/a Products: n/a Problem Types: n/a Description: The FancyBox for WordPress plugin before 3.0.3 for WordPress does not properly restrict access, which allows remote attackers to conduct cross-site scripting (XSS) attacks via an mfbfw[*] parameter in an update action to wp-admin/admin-post.php, as demonstrated by the mfbfw[padding] parameter and exploited in the wild in February 2015. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/72506 - http://www.openwall.com/lists/oss-security/2015/02/05/10 - https://plugins.trac.wordpres
w.securityfocus.com/bid/72506 - http://www.openwall.com/lists/oss-security/2015/02/05/10 - https://plugins.trac.wordpress.org/changeset/1082625/ - http://www.exploit-db.com/exploits/36087 - https://wordpress.org/plugins/fancybox-for-wordpress/changelog/ - https://wordpress.org/support/topic/possible-malware-2 - http://osvdb.org/show/osvdb/118543 - http://blog.sucuri.net/2015/02/zero-day-in-the-fancybox-for-wordpress-plugin.html
CVE ID: CVE-2015-1495 State: PUBLISHED Published: 2015-02-16T15:00:00 Last Updated: 2024-08-06T04:47:16.771Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in Motorola Scanner SDK allow remote attackers to execute arbitrary code via a crafted string to the Open method in (1) IOPOSScanner.ocx or (2) IOPOSScale.ocx. Additional Analyst Notes: - CVE Program Container: References: - https://portal.motorolasolutions.com/Support/US-EN/Resolution?solutionId=87666 - http://www.zerodayinitiative.com/advisories/ZDI-15-034/ - http://www.zerodayinitiative.com/advisories/ZDI-15-033/
CVE ID: CVE-2015-1496 State: PUBLISHED Published: 2015-02-16T15:00:00 Last Updated: 2024-08-06T04:47:16.028Z Vendors: n/a Products: n/a Problem Types: n/a Description: Motorola Scanner SDK uses weak permissions for (1) CoreScanner.exe, (2) rsmdriverproviderservice.exe, and (3) ScannerService.exe, which allows local users to gain privileges via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - https://portal.motorolasolutions.com/Support/US-EN/Resolution?solutionId=87666 - http://www.zerodayinitiative.com/advisories/ZDI-15-035/ - http://www.zerodayinitiative.com/advisories/ZDI-15-037/ - http://www.zerodayinitiative.com/advisories/ZDI-15-036/
CVE ID: CVE-2015-1497 State: PUBLISHED Published: 2015-02-16T15:00:00 Last Updated: 2024-08-06T04:47:16.752Z Vendors: n/a Products: n/a Problem Types: n/a Description: radexecd.exe in Persistent Systems Radia Client Automation (RCA) 7.9, 8.1, 9.0, and 9.1 allows remote attackers to execute arbitrary commands via a crafted request to TCP port 3465. Additional Analyst Notes: - CVE Program Container: References: - http://osvdb.org/show/osvdb/118382 - http://www.securityfocus.com/bid/72612 - http://www.exploit-db.com/exploits/36169 - http://www.zerodayinitiative.com/advisories/ZDI-15-038/ - https://support.accelerite.com/hc/en-us/articles/203659814-Accelerite-releases-solutions-and-best-practice
ZDI-15-038/ - https://support.accelerite.com/hc/en-us/articles/203659814-Accelerite-releases-solutions-and-best-practices-to-enhance-the-security-for-RBAC-and-Remote-Notify-features - http://www.exploit-db.com/exploits/36206 - http://packetstormsecurity.com/files/130459/HP-Client-Automation-Command-Injection.html - https://www.exploit-db.com/exploits/40491/
CVE ID: CVE-2015-1498 State: PUBLISHED Published: 2015-02-16T15:00:00 Last Updated: 2024-08-06T04:47:16.223Z Vendors: n/a Products: n/a Problem Types: n/a Description: Persistent Systems Radia Client Automation does not properly restrict access to certain request, which allows remote attackers to (1) enumerate user accounts via a getUsers request, (2) assign a role to a user account via an addAssigneesToRole request, (3) remove a role from a user account via a removeAssigneesFromRole request, or (4) have other unspecified impact. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-15-039/ - https://radiasupport.accelerite.com/hc/en
ainer: References: - http://www.zerodayinitiative.com/advisories/ZDI-15-039/ - https://radiasupport.accelerite.com/hc/en-us/articles/203659814-Accelerite-releases-solutions-and-best-practices-to-enhance-the-security-for-RBAC-and-Remote-Notify-features
CVE ID: CVE-2015-1499 State: PUBLISHED Published: 2015-02-16T15:00:00 Last Updated: 2024-08-06T04:47:15.953Z Vendors: n/a Products: n/a Problem Types: n/a Description: The ActiveMQ Broker in Samsung Security Manager (SSM) before 1.31 allows remote attackers to delete arbitrary files, and consequently cause a denial of service, via a DELETE request. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/100918 - http://www.zerodayinitiative.com/advisories/ZDI-15-041/
CVE ID: CVE-2015-1500 State: PUBLISHED Published: 2015-02-16T15:00:00 Last Updated: 2024-08-06T04:47:16.863Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple stack-based buffer overflows in the TSUnicodeGraphEditorControl in SolarWinds Server and Application Monitor (SAM) allow remote attackers to execute arbitrary code via unspecified vectors to (1) graphManager.load or (2) factory.load. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-15-044/ - http://www.zerodayinitiative.com/advisories/ZDI-15-042/
CVE ID: CVE-2015-1501 State: PUBLISHED Published: 2015-02-16T15:00:00 Last Updated: 2024-08-06T04:47:16.213Z Vendors: n/a Products: n/a Problem Types: n/a Description: The factory.loadExtensionFactory function in TSUnicodeGraphEditorControl in SolarWinds Server and Application Monitor (SAM) allow remote attackers to execute arbitrary code via a UNC path to a crafted binary. Additional Analyst Notes: - CVE Program Container: References: - http://www.zerodayinitiative.com/advisories/ZDI-15-043/
CVE ID: CVE-2015-1503 State: PUBLISHED Published: 2018-05-08T20:00:00 Last Updated: 2024-08-06T04:47:16.957Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple directory traversal vulnerabilities in IceWarp Mail Server before 11.2 allow remote attackers to read arbitrary files via a (1) .. (dot dot) in the file parameter to a webmail/client/skins/default/css/css.php page or .../. (dot dot dot slash dot) in the (2) script or (3) style parameter to webmail/old/calendar/minimizer/index.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2015-001/?fid=5614 - http://packetstormsecurity.com/fi
://www.trustwave.com/Resources/Security-Advisories/Advisories/TWSL2015-001/?fid=5614 - http://packetstormsecurity.com/files/147505/IceWarp-Mail-Server-Directory-Traversal.html - https://www.exploit-db.com/exploits/44587/
CVE ID: CVE-2015-1512 State: PUBLISHED Published: 2015-02-06T15:00:00 Last Updated: 2024-08-06T04:47:16.967Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in FancyFon FAMOC before 3.17.4 allow remote attackers to inject arbitrary web script or HTML via the (1) LoginForm[username] to ui/system/login or the (2) order or (3) myorgs to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2014-011.txt - https://exchange.xforce.ibmcloud.com/vulnerabilities/100410 - http://packetstormsecurity.com/files/130119/FancyFon-FAMOC-3.16.5-Cross-Site-S
rce.ibmcloud.com/vulnerabilities/100410 - http://packetstormsecurity.com/files/130119/FancyFon-FAMOC-3.16.5-Cross-Site-Scripting.html
CVE ID: CVE-2015-1513 State: PUBLISHED Published: 2015-02-06T15:00:00 Last Updated: 2024-08-06T04:47:16.226Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in SIPhone Enterprise PBX allows remote attackers to execute arbitrary SQL commands via the Username. Additional Analyst Notes: - CVE Program Container: References: - http://packetstormsecurity.com/files/130194/SIPhone-Enterprise-PBX-SQL-Injection.html - https://exchange.xforce.ibmcloud.com/vulnerabilities/100582
CVE ID: CVE-2015-1514 State: PUBLISHED Published: 2015-02-06T15:00:00 Last Updated: 2024-08-06T04:47:16.892Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in FancyFon FAMOC before 3.17.4 allow (1) remote attackers to execute arbitrary SQL commands via the device ID REST parameter (PATH_INFO) to /ajax.php or (2) remote authenticated users to execute arbitrary SQL commands via the order parameter to index.php. Additional Analyst Notes: - CVE Program Container: References: - https://www.syss.de/fileadmin/dokumente/Publikationen/Advisories/SYSS-2014-010.txt - http://www.securityfocus.com/archive/1/534552/100/0/threaded - http://packetstormsecur
en/Advisories/SYSS-2014-010.txt - http://www.securityfocus.com/archive/1/534552/100/0/threaded - http://packetstormsecurity.com/files/130117/FancyFon-FAMOC-3.16.5-SQL-Injection.html
CVE ID: CVE-2015-1515 State: PUBLISHED Published: 2015-02-19T15:00:00 Last Updated: 2024-08-06T04:47:16.712Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dwall.sys driver in SoftSphere DefenseWall Personal Firewall 3.24 allows local users to write data to arbitrary memory locations, and consequently gain privileges, via a crafted 0x00222000, 0x00222004, 0x00222008, 0x0022200c, or 0x00222010 IOCTL call. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/36052 - http://www.osvdb.org/117996
CVE ID: CVE-2015-1516 State: PUBLISHED Published: 2015-09-03T17:00:00 Last Updated: 2024-08-06T04:47:16.024Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Polycom RealPresence CloudAXIS Suite before 1.7.0 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://adrianhayter.com/exploits.php
CVE ID: CVE-2015-1517 State: PUBLISHED Published: 2015-02-20T16:00:00 Last Updated: 2024-08-06T04:47:16.749Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in Piwigo before 2.7.4, when all filters are activated, allows remote authenticated users to execute arbitrary SQL commands via the filter_level parameter in a "Refresh photo set" action in the batch_manager page to admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/72664 - http://www.securityfocus.com/archive/1/534723/100/0/threaded - http://packetstormsecurity.com/files/130440/Piwigo-2.7.3-SQL-Injection.html - http://piwigo.org/releases/2.7
/threaded - http://packetstormsecurity.com/files/130440/Piwigo-2.7.3-SQL-Injection.html - http://piwigo.org/releases/2.7.4 - http://piwigo.org/forum/viewtopic.php?id=25179
CVE ID: CVE-2015-1518 State: PUBLISHED Published: 2015-02-11T19:00:00 Last Updated: 2024-08-06T04:47:16.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in the search_post function in includes/search.php in Redaxscript before 2.3.0 allows remote attackers to execute arbitrary SQL commands via the search_terms parameter. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/36023 - http://packetstormsecurity.com/files/130322/Radexscript-CMS-2.2.0-SQL-Injection.html - http://seclists.org/fulldisclosure/2015/Feb/39 - http://www.itas.vn/news/itas-team-found-out-a-sql-injection-vulnerability-in-redaxscript-2-
fulldisclosure/2015/Feb/39 - http://www.itas.vn/news/itas-team-found-out-a-sql-injection-vulnerability-in-redaxscript-2-2-0-cms-75.html - http://www.securityfocus.com/archive/1/534661/100/0/threaded
CVE ID: CVE-2015-1521 State: PUBLISHED Published: 2017-04-24T06:12:00 Last Updated: 2024-08-06T04:47:16.983Z Vendors: n/a Products: n/a Problem Types: n/a Description: analyzer/protocol/dnp3/DNP3.cc in Bro before 2.3.2 does not properly handle zero values of a packet length, which allows remote attackers to cause a denial of service (buffer overflow or buffer over-read if NDEBUG; otherwise assertion failure) via a crafted DNP3 packet. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bro/bro/commit/6cedd67c381ff22fde653adf02ee31caf66c81a0
CVE ID: CVE-2015-1522 State: PUBLISHED Published: 2017-04-24T06:12:00 Last Updated: 2024-08-06T04:47:16.933Z Vendors: n/a Products: n/a Problem Types: n/a Description: analyzer/protocol/dnp3/DNP3.cc in Bro before 2.3.2 does not reject certain non-zero values of a packet length, which allows remote attackers to cause a denial of service (buffer overflow or buffer over-read) via a crafted DNP3 packet. Additional Analyst Notes: - CVE Program Container: References: - https://github.com/bro/bro/commit/6cedd67c381ff22fde653adf02ee31caf66c81a0
CVE ID: CVE-2015-1525 State: PUBLISHED Published: 2020-01-24T17:11:43 Last Updated: 2024-08-06T04:47:15.944Z Vendors: n/a Products: n/a Problem Types: n/a Description: audio/AudioPolicyManagerBase.cpp in Android before 5.1 allows attackers to cause a denial of service (audio_policy application outage) via a crafted application that provides a NULL device address. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/hardware/libhardware_legacy/+/2d2ea50%5E%21/
CVE ID: CVE-2015-1526 State: PUBLISHED Published: 2017-09-27T19:00:00 Last Updated: 2024-08-06T04:47:16.173Z Vendors: n/a Products: n/a Problem Types: n/a Description: The media_server component in Android allows remote attackers to cause a denial of service via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/76666 - https://www.blackhat.com/docs/us-15/materials/us-15-Gong-Fuzzing-Android-System-Services-By-Binder-Call-To-Escalate-Privilege.pdf
CVE ID: CVE-2015-1527 State: PUBLISHED Published: 2017-09-15T20:00:00 Last Updated: 2024-08-06T04:47:16.987Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in IAudioPolicyService.cpp in Android allows local users to gain privileges via a crafted application, aka Android Bug ID 19261727. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/76665 - https://android.googlesource.com/platform/frameworks/av/+/6dc6c38%5E%21/ - https://www.blackhat.com/docs/us-15/materials/us-15-Gong-Fuzzing-Android-System-Services-By-Binder-Call-To-Escalate-Privilege.pdf
CVE ID: CVE-2015-1528 State: PUBLISHED Published: 2015-10-01T00:00:00 Last Updated: 2024-08-06T04:47:16.857Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the native_handle_create function in libcutils/native_handle.c in Android before 5.1.1 LMY48M allows attackers to obtain a different application's privileges or cause a denial of service (Binder heap memory corruption) via a crafted application, aka internal bug 19334482. Additional Analyst Notes: - CVE Program Container: References: - https://groups.google.com/forum/message/raw?msg=android-security-updates/1M7qbSvACjo/Y7jewiW1AwAJ - https://android.googlesource.com/platform/frameworks/native/+/7dcd0ec9c916
d-security-updates/1M7qbSvACjo/Y7jewiW1AwAJ - https://android.googlesource.com/platform/frameworks/native/+/7dcd0ec9c91688cfa3f679804ba6e132f9811254 - https://android.googlesource.com/platform/system/core/+/e8c62fb484151f76ab88b1d5130f38de24ac8c14 - https://www.blackhat.com/docs/us-15/materials/us-15-Gong-Fuzzing-Android-System-Services-By-Binder-Call-To-Escalate-Privilege.pdf
CVE ID: CVE-2015-1529 State: PUBLISHED Published: 2017-05-23T03:56:00 Last Updated: 2024-08-06T04:47:16.187Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in soundtrigger/ISoundTriggerHwService.cpp in Android allows attacks to cause a denial of service via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/76663 - https://android.googlesource.com/platform/frameworks/av/+/b9096dc - https://www.blackhat.com/docs/us-15/materials/us-15-Gong-Fuzzing-Android-System-Services-By-Binder-Call-To-Escalate-Privilege.pdf
CVE ID: CVE-2015-1530 State: PUBLISHED Published: 2020-01-24T17:11:40 Last Updated: 2024-08-06T04:47:16.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: media/libmedia/IAudioPolicyService.cpp in Android before 5.1 allows attackers to execute arbitrary code with media_server privileges or cause a denial of service (integer overflow) via a crafted application that provides an invalid array size. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/frameworks/av/+/74adca9%5E%21/
CVE ID: CVE-2015-1536 State: PUBLISHED Published: 2015-10-01T00:00:00 Last Updated: 2024-08-06T04:47:16.016Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the Bitmap_createFromParcel function in core/jni/android/graphics/Bitmap.cpp in Android before 5.1.1 LMY48I allows attackers to cause a denial of service (system_server crash) or obtain sensitive system_server memory-content information via a crafted application that leverages improper unmarshalling of bitmaps, aka internal bug 19666945. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/frameworks/base/+/d44e5bde18a41beda39d49189bef7f2ba7c8f3cb - http
eferences: - https://android.googlesource.com/platform/frameworks/base/+/d44e5bde18a41beda39d49189bef7f2ba7c8f3cb - https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ
CVE ID: CVE-2015-1537 State: PUBLISHED Published: 2017-09-27T19:00:00 Last Updated: 2024-08-06T04:47:16.954Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in IHDCP.cpp in the media_server component in Android allows remote attackers to execute arbitrary code via a crafted application. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/76670 - https://android.googlesource.com/platform/frameworks/av/+/c82e31a7039a03dca7b37c65b7890ba5c1e18ced%5E%21/#F0 - https://www.blackhat.com/docs/us-15/materials/us-15-Gong-Fuzzing-Android-System-Services-By-Binder-Call-To-Escalate-Privilege.pdf
CVE ID: CVE-2015-1538 State: PUBLISHED Published: 2015-10-01T00:00:00 Last Updated: 2024-08-06T04:47:16.832Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the SampleTable::setSampleToChunkParams function in SampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I allows remote attackers to execute arbitrary code via crafted atoms in MP4 data that trigger an unchecked multiplication, aka internal bug 20139950, a related issue to CVE-2015-4496. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/frameworks/av/+/2434839bbd168469f80dd9a22f1328bc81046398 - http://packetstormsecurity.com/files/134131/Li
e.com/platform/frameworks/av/+/2434839bbd168469f80dd9a22f1328bc81046398 - http://packetstormsecurity.com/files/134131/Libstagefright-Integer-Overflow-Check-Bypass.html - http://www.securitytracker.com/id/1033094 - http://www.securityfocus.com/bid/76052 - https://www.exploit-db.com/exploits/38124/ - http://www1.huawei.com/en/security/psirt/security-bulletins/security-advisories/hw-448928.htm - http://www.huawei.com/en/psirt/security-advisories/hw-448928 - https://groups.google.com/forum/message/raw?msg=android-security-updates/Ugvu3fi6RQM/yzJvoTVrIQAJ
CVE ID: CVE-2015-1539 State: PUBLISHED Published: 2015-10-01T00:00:00 Last Updated: 2024-08-06T04:47:16.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple integer underflows in the ESDS::parseESDescriptor function in ESDS.cpp in libstagefright in Android before 5.1.1 LMY48I allow remote attackers to execute arbitrary code via crafted ESDS atoms, aka internal bug 20139950, a related issue to CVE-2015-4493. Additional Analyst Notes: - CVE Program Container: References: - https://android.googlesource.com/platform/frameworks/av/+/5e751957ba692658b7f67eb03ae5ddb2cd3d970c - http://www.securitytracker.com/id/1033094 - http://www.securityfocus.com/bid/76052 - http://www1.huawei