CERT-In Advisory
CIAD-2017-0053
Multiple Vulnerabilities in Google Android
Original Issue Date: November 23, 2017
Severity Rating: High
Software Affected
- Google Android versions 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1, 7.1.2, 8.0
Overview
Multiple vulnerabilities have been reported in Google Android which could allow a remote attacker to cause obtain elevated privileges and execute arbitrary code on the targeted system.
Description
These vulnerabilities exist in the Android framework. A remote attacker could exploit these vulnerabilities using a specially crafted file which could trigger arbitrary code execution within the context of a privileged process or to bypass user interaction requirements before joining an unsecured Wi-Fi network on the targeted system.
Successful exploitation of these vulnerabilities could allow an attacker to execute arbitrary code and gain elevated privileges or disclosure of sensitive information on the targeted system.
Solution
Contact Device vendor or manufacturer for appropriate over-the-air updates.
https://source.android.com/security/bulletin/2017-11-01
Vendor Information
Android
https://source.android.com/security/bulletin/2017-11-01
References
Android
https://source.android.com/security/bulletin/2017-11-01
CVE Name
CVE-2017-0830
CVE-2017-0831
CVE-2017-0832
CVE-2017-0833
CVE-2017-0834
CVE-2017-0835
CVE-2017-0836
CVE-2017-0839
CVE-2017-0840
CVE-2017-0841
CVE-2017-0842
CVE-2017-0843
CVE-2017-6264
CVE-2017-7541
CVE-2017-9077
CVE-2017-9690
CVE-2017-11013
CVE-2017-11014
CVE-2017-11015
CVE-2017-11017
CVE-2017-11028
CVE-2017-11092
CVE-2017-13077
CVE-2017-13078
CVE-2017-13079
CVE-2017-13080
CVE-2017-13081
CVE-2017-13082
CVE-2017-13086
CVE-2017-13087
CVE-2017-13088
Disclaimer
The information provided herein is on "as is" basis, without warranty of any kind.
Contact Information
Email: info@cert-in.org.in Phone: +91-11-24368572
Postal address
Indian Computer Emergency Response Team (CERT-In)
Ministry of Electronics and Information Technology
Government of India
Electronics Niketan
6, CGO Complex, Lodhi Road,
New Delhi - 110 003
India
|