rainbutterfly/cve_corpus huggingface dataset:
CVE-2015-6545 
Cross-site request forgery (CSRF) vulnerability in ajax.php in Cerb before 7.0.4 allows remote attackers to hijack the authentication of administrators for requests that add an administrator account via a saveWorkerPeek action.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-03T17:00:00.000Z
CVE-2015-6546 
The vCMP host in F5 BIG-IP Analytics, APM, ASM, GTM, Link Controller, and LTM 11.0.0 before 11.6.0, BIG-IP AAM 11.4.0 before 11.6.0, BIG-IP AFM and PEM 11.3.0 before 11.6.0, BIG-IP Edge Gateway, WebAccelerator, and WOM 11.0.0 through 11.3.0, BIG-IP PSM 11.0.0 through 11.4.1 allows remote attackers to cause a denial of service via "malicious traffic."
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-06T18:00:00.000Z
CVE-2015-6547 
The management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allows remote authenticated users to execute arbitrary commands at boot time via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-20T20:00:00.000Z
CVE-2015-6548 
Multiple SQL injection vulnerabilities in a PHP script in the management console on Symantec Web Gateway (SWG) appliances with software before 5.2.2 DB 5.0.0.1277 allow remote authenticated users to execute arbitrary SQL commands via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-20T20:00:00.000Z
CVE-2015-6549 
Cross-site scripting (XSS) vulnerability in an application console in the server in Symantec NetBackup OpsCenter before 7.7.1 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-03T10:00:00.000Z
CVE-2015-6550 
bpcd in Veritas NetBackup 7.x through 7.5.0.7, 7.6.0.x through 7.6.0.4, 7.6.1.x through 7.6.1.2, and 7.7.x before 7.7.2 and NetBackup Appliance through 2.5.4, 2.6.0.x through 2.6.0.4, 2.6.1.x through 2.6.1.2, and 2.7.x before 2.7.2 allows remote attackers to execute arbitrary commands via crafted input.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-07T14:00:00.000Z
CVE-2015-6551 
Veritas NetBackup 7.x through 7.5.0.7 and 7.6.0.x through 7.6.0.4 and NetBackup Appliance through 2.5.4 and 2.6.0.x through 2.6.0.4 do not use TLS for administration-console traffic to the NBU server, which allows remote attackers to obtain sensitive information by sniffing the network for key-exchange packets.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-07T14:00:00.000Z
CVE-2015-6552 
The management-services protocol implementation in Veritas NetBackup 7.x through 7.5.0.7, 7.6.0.x through 7.6.0.4, 7.6.1.x through 7.6.1.2, and 7.7.x before 7.7.2 and NetBackup Appliance through 2.5.4, 2.6.0.x through 2.6.0.4, 2.6.1.x through 2.6.1.2, and 2.7.x before 2.7.2 allows remote attackers to make arbitrary RPC calls via unspecified vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-05-07T14:00:00.000Z
CVE-2015-6554 
Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP3 allows remote attackers to execute arbitrary OS commands via crafted data.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-12T02:00:00.000Z
CVE-2015-6555 
Symantec Endpoint Protection Manager (SEPM) 12.1 before 12.1-RU6-MP3 allows remote attackers to execute arbitrary Java code by connecting to the console Java port.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-12T02:00:00.000Z
CVE-2015-6556 
EACommunicatorSrv.exe in the Framework Service in the client in Symantec Endpoint Encryption (SEE) before 11.1.0 allows remote authenticated users to discover credentials by triggering a memory dump.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-18T11:00:00.000Z
CVE-2015-6557 
IBM Tivoli Storage Manager for Databases: Data Protection for Microsoft SQL Server 5.5 before 5.5.6.1, 6.3 before 6.3.1.5, 6.4 before 6.4.1.7, and 7.1 before 7.1.2; Tivoli Storage Manager for Mail: Data Protection for Microsoft Exchange Server 5.5 before 5.5.1.1, 6.1 before 6.1.3.7, 6.3 before 6.3.1.5, 6.4 before 6.4.1.7, and 7.1 before 7.1.2; and Tivoli Storage FlashCopy Manager 3.1 before 3.1.1.5, 3.2 before 3.2.1.7, and 4.1 before 4.1.2, when application tracing is used, place cleartext passwords in exception messages, which allows physically proximate attackers to obtain sensitive information by reading trace output, a different vulnerability than CVE-2015-4949.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-23T01:00:00.000Z
CVE-2015-6563 
The monitor component in sshd in OpenSSH before 7.0 on non-OpenBSD platforms accepts extraneous username data in MONITOR_REQ_PAM_INIT_CTX requests, which allows local users to conduct impersonation attacks by leveraging any SSH login access in conjunction with control of the sshd uid to send a crafted MONITOR_REQ_PWNAM request, related to monitor.c and monitor_wrap.c.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-24T00:00:00.000Z
CVE-2015-6564 
Use-after-free vulnerability in the mm_answer_pam_free_ctx function in monitor.c in sshd in OpenSSH before 7.0 on non-OpenBSD platforms might allow local users to gain privileges by leveraging control of the sshd uid to send an unexpectedly early MONITOR_REQ_PAM_FREE_CTX request.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-24T00:00:00.000Z
CVE-2015-6565 
sshd in OpenSSH 6.8 and 6.9 uses world-writable permissions for TTY devices, which allows local users to cause a denial of service (terminal disruption) or possibly have unspecified other impact by writing to a device, as demonstrated by writing an escape sequence.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-08-24T00:00:00.000Z
CVE-2015-6566 
zarafa-autorespond in Zarafa Collaboration Platform (ZCP) before 7.2.1 allows local users to gain privileges via a symlink attack on /tmp/zarafa-vacation-*.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-01-11T15:00:00.000Z
CVE-2015-6567 
Wolf CMS before 0.8.3.1 allows unrestricted file upload and PHP Code Execution because admin/plugin/file_manager/browse/ (aka the filemanager) does not validate the parameter "filename" properly. Exploitation requires a registered user who has access to upload functionality.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-14T16:00:00.000Z
CVE-2015-6568 
Wolf CMS before 0.8.3.1 allows unrestricted file rename and PHP Code Execution because admin/plugin/file_manager/browse/ (aka the filemanager) does not prevent a change of a file extension to ".php" after originally using the parameter "filename" for uploading a JPEG image. Exploitation requires a registered user who has access to upload functionality.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-04-14T16:00:00.000Z
CVE-2015-6569 
Race condition in the LoadBalancer module in the Atlassian Floodlight Controller before 1.2 allows remote attackers to cause a denial of service (NULL pointer dereference and thread crash) via a state manipulation attack.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2018-02-21T15:00:00.000Z
CVE-2015-6574 
The SNAP Lite component in certain SISCO MMS-EASE and AX-S4 ICCP products allows remote attackers to cause a denial of service (CPU consumption) via a crafted packet.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2016-12-15T00:00:00.000Z
CVE-2015-6575 
SampleTable.cpp in libstagefright in Android before 5.1.1 LMY48I does not properly consider integer promotion, which allows remote attackers to execute arbitrary code or cause a denial of service (integer overflow and memory corruption) via crafted atoms in MP4 data, aka internal bug 20139950, a different vulnerability than CVE-2015-1538. NOTE: this vulnerability exists because of an incomplete fix for CVE-2014-7915, CVE-2014-7916, and/or CVE-2014-7917.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-01T00:00:00.000Z
CVE-2015-6576 
Bamboo 2.2 before 5.8.5 and 5.9.x before 5.9.7 allows remote attackers with access to the Bamboo web interface to execute arbitrary Java code via an unspecified resource.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-10-02T18:00:00.000Z
CVE-2015-6580 
Multiple unspecified vulnerabilities in Google V8 before 4.5.103.29, as used in Google Chrome before 45.0.2454.85, allow attackers to cause a denial of service or possibly have other impact via unknown vectors.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-03T22:00:00.000Z
CVE-2015-6581 
Double free vulnerability in the opj_j2k_copy_default_tcp_and_create_tcd function in j2k.c in OpenJPEG before r3002, as used in PDFium in Google Chrome before 45.0.2454.85, allows remote attackers to execute arbitrary code or cause a denial of service (heap memory corruption) by triggering a memory-allocation failure.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-03T22:00:00.000Z
CVE-2015-6582 
The decompose function in platform/transforms/TransformationMatrix.cpp in Blink, as used in Google Chrome before 45.0.2454.85, does not verify that a matrix inversion succeeded, which allows remote attackers to cause a denial of service (uninitialized memory access and application crash) or possibly have unspecified other impact via a crafted web site.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-03T22:00:00.000Z
CVE-2015-6583 
Google Chrome before 45.0.2454.85 does not display a location bar for a hosted app's window after navigation away from the installation site, which might make it easier for remote attackers to spoof content via a crafted app, related to browser.cc and hosted_app_browser_controller.cc.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-03T22:00:00.000Z
CVE-2015-6584 
Cross-site scripting (XSS) vulnerability in the DataTables plugin 1.10.8 and earlier for jQuery allows remote attackers to inject arbitrary web script or HTML via the scripts parameter to media/unit_testing/templates/6776.php.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-11T15:00:00.000Z
CVE-2015-6585 
hwpapp.dll in Hangul Word Processor allows remote attackers to execute arbitrary code via a crafted heap spray, and by leveraging a "type confusion" via an HWPX file containing a crafted para text tag.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-07-25T18:00:00.000Z
CVE-2015-6586 
The mDNS module in Huawei WLAN AC6005, AC6605, and ACU2 devices with software before V200R006C00SPC100 allows remote attackers to obtain sensitive information by leveraging failure to restrict processing of mDNS unicast queries to the link local network.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-05-23T03:56:00.000Z
CVE-2015-6587 
The vlserver in OpenAFS before 1.6.13 allows remote authenticated users to cause a denial of service (out-of-bounds read and crash) via a crafted regular expression in a VL_ListAttributesN2 RPC.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-09-02T10:00:00.000Z
CVE-2015-6588 
Cross-site scripting (XSS) vulnerability in login-fsp.html in MODX Revolution before 1.9.1 allows remote attackers to inject arbitrary web script or HTML via the QUERY_STRING.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-08-29T15:00:00.000Z
CVE-2015-6589 
Directory traversal vulnerability in Kaseya Virtual System Administrator (VSA) 7.0.0.0 before 7.0.0.33, 8..0.0.0 before 8.0.0.23, 9.0.0.0 before 9.0.0.19, and 9.1.0.0 before 9.1.0.9 allows remote authenticated users to write to and execute arbitrary files due to insufficient restrictions in file paths to json.ashx.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-02-13T20:11:27.000Z
CVE-2015-6591 
Directory traversal vulnerability in application/templates/amelia/loadjs.php in Free Reprintables ArticleFR 3.0.7 and earlier allows local users to read arbitrary files via the s parameter.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2020-01-15T18:15:22.000Z
CVE-2015-6592 
Huawei UAP2105 before V300R012C00SPC160(BootRom) does not require authentication to the serial port or the VxWorks shell.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2017-09-25T21:00:00.000Z
CVE-2015-6596 
mediaserver in Android before 5.1.1 LMY48T allows attackers to gain privileges via a crafted application, aka internal bugs 20731946 and 20719651, a different vulnerability than CVE-2015-7717.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-06T17:00:00.000Z
CVE-2015-6598 
libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 23306638.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-06T17:00:00.000Z
CVE-2015-6599 
libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 23416608.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-06T17:00:00.000Z
CVE-2015-6600 
libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 22882938.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-06T17:00:00.000Z
CVE-2015-6601 
libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 22935234.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-06T17:00:00.000Z
CVE-2015-6602 
libutils in Android through 5.1.1 LMY48M allows remote attackers to execute arbitrary code via crafted metadata in a (1) MP3 or (2) MP4 file, as demonstrated by an attack against use of libutils by libstagefright in Android 5.x.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-02T01:00:00.000Z
CVE-2015-6603 
libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 23227354.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-06T17:00:00.000Z
CVE-2015-6604 
libstagefright in Android before 5.1.1 LMY48T allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 23129786.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-06T17:00:00.000Z
CVE-2015-6605 
mediaserver in Android before 5.1.1 LMY48T allows attackers to cause a denial of service (process crash) via unspecified vectors, aka internal bugs 20915134 and 23142203, a different vulnerability than CVE-2015-7718.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-06T17:00:00.000Z
CVE-2015-6606 
The Secure Element Evaluation Kit (aka SEEK or SmartCard API) plugin in Android before 5.1.1 LMY48T allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 22301786.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-06T17:00:00.000Z
CVE-2015-6607 
SQLite before 3.8.9, as used in Android before 5.1.1 LMY48T, allows attackers to gain privileges via a crafted application, aka internal bug 20099586.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-10-06T17:00:00.000Z
CVE-2015-6608 
mediaserver in Android 5.x before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bugs 19779574, 23680780, 23876444, and 23658148, a different vulnerability than CVE-2015-8072 and CVE-2015-8073.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-03T11:00:00.000Z
CVE-2015-6609 
libutils in Android before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted audio file, aka internal bug 22953624.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-03T11:00:00.000Z
CVE-2015-6610 
libstagefright in Android before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows attackers to gain privileges or cause a denial of service (memory corruption) via a crafted application, aka internal bug 23707088.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-03T11:00:00.000Z
CVE-2015-6611 
mediaserver in Android before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows remote attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, via unknown vectors, aka internal bugs 23905951, 23912202, 23953967, 23696300, 23600291, 23756261, 23541506, 23284974, 23542351, and 23542352, a different vulnerability than CVE-2015-8074.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-03T11:00:00.000Z
CVE-2015-6612 
libmedia in Android before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows attackers to gain privileges via a crafted application, aka internal bug 23540426.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-03T11:00:00.000Z
CVE-2015-6613 
Bluetooth in Android before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows attackers to send commands to a debugging port, and consequently gain privileges, via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 24371736.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-03T11:00:00.000Z
CVE-2015-6614 
Telephony in Android 5.x before 5.1.1 LMY48X allows attackers to gain privileges, and consequently bypass intended network-interface restrictions, perform expensive data transfers, or cause a denial of service (call-reception outage or mute manipulation), via a crafted application, aka internal bug 21900139.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-11-03T11:00:00.000Z
CVE-2015-6616 
mediaserver in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bugs 24630158 and 23882800, a different vulnerability than CVE-2015-8505, CVE-2015-8506, and CVE-2015-8507.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-08T23:00:00.000Z
CVE-2015-6617 
Skia, as used in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 23648740.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-08T23:00:00.000Z
CVE-2015-6618 
Bluetooth in Android 4.4 and 5.x before 5.1.1 LMY48Z allows user-assisted remote attackers to execute arbitrary code by leveraging access to the local physical environment, aka internal bug 24595992.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-08T23:00:00.000Z
CVE-2015-6619 
The kernel in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows attackers to gain privileges via a crafted application, aka internal bug 23520714.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-08T23:00:00.000Z
CVE-2015-6620 
libstagefright in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bugs 24123723 and 24445127.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-08T23:00:00.000Z
CVE-2015-6621 
SystemUI in Android 5.x before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 23909438.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-08T23:00:00.000Z
CVE-2015-6622 
The Native Frameworks Library in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, via unknown vectors, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 23905002.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-08T23:00:00.000Z
CVE-2015-6623 
Wi-Fi in Android 6.0 before 2015-12-01 allows attackers to gain privileges via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 24872703.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-08T23:00:00.000Z
CVE-2015-6624 
System Server in Android 6.0 before 2015-12-01 allows attackers to obtain sensitive information via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 23999740.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-08T23:00:00.000Z
CVE-2015-6625 
System Server in Android 6.0 before 2015-12-01 allows attackers to obtain sensitive information and consequently gain privileges via a crafted application, aka internal bug 23936840.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-08T23:00:00.000Z
CVE-2015-6626 
libstagefright in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows remote attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, via unknown vectors, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 24310423.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-08T23:00:00.000Z
CVE-2015-6627 
The Audio component in Android before 5.1.1 LMY48Z and 6.0 before 2015-12-01 allows remote attackers to obtain sensitive information via a crafted audio file, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 24211743.
Problem types: description: n/a
Affected products: vendor: n/a
product: n/a
Published: 2015-12-08T23:00:00.000Z