CVE-2011-1149

Android before 2.3 does not properly restrict access to the system property space, which allows local applications to bypass the application sandbox and gain privileges, as demonstrated by psneuter and KillingInTheNameOf, related to the use of Android shared memory (ashmem) and ASHMEM_SET_PROT_MASK.

Affected Software

Name	Vendor	Start Version	End Version
Android	Google	*	2.2.2 (including)
Android	Google	1.5 (including)	1.5 (including)
Android	Google	1.6 (including)	1.6 (including)
Android	Google	2.1 (including)	2.1 (including)
Android	Google	2.2-rev1 (including)	2.2-rev1 (including)
Android	Google	2.2.1 (including)	2.2.1 (including)
Linux-flo	Ubuntu	esm-apps/xenial	*
Linux-flo	Ubuntu	trusty	*
Linux-flo	Ubuntu	trusty/esm	*
Linux-flo	Ubuntu	utopic	*
Linux-flo	Ubuntu	vivid	*
Linux-flo	Ubuntu	vivid/stable-phone-overlay	*
Linux-flo	Ubuntu	wily	*
Linux-flo	Ubuntu	xenial	*
Linux-flo	Ubuntu	yakkety	*
Linux-goldfish	Ubuntu	esm-apps/xenial	*
Linux-goldfish	Ubuntu	saucy	*
Linux-goldfish	Ubuntu	trusty	*
Linux-goldfish	Ubuntu	trusty/esm	*
Linux-goldfish	Ubuntu	utopic	*
Linux-goldfish	Ubuntu	vivid	*
Linux-goldfish	Ubuntu	wily	*
Linux-goldfish	Ubuntu	xenial	*
Linux-goldfish	Ubuntu	yakkety	*
Linux-goldfish	Ubuntu	zesty	*
Linux-grouper	Ubuntu	saucy	*
Linux-grouper	Ubuntu	trusty	*
Linux-grouper	Ubuntu	trusty/esm	*
Linux-grouper	Ubuntu	utopic	*
Linux-maguro	Ubuntu	saucy	*
Linux-maguro	Ubuntu	trusty	*
Linux-mako	Ubuntu	esm-apps/xenial	*
Linux-mako	Ubuntu	saucy	*
Linux-mako	Ubuntu	trusty	*
Linux-mako	Ubuntu	trusty/esm	*
Linux-mako	Ubuntu	utopic	*
Linux-mako	Ubuntu	vivid	*
Linux-mako	Ubuntu	vivid/stable-phone-overlay	*
Linux-mako	Ubuntu	wily	*
Linux-mako	Ubuntu	xenial	*
Linux-mako	Ubuntu	yakkety	*
Linux-manta	Ubuntu	saucy	*
Linux-manta	Ubuntu	trusty	*
Linux-manta	Ubuntu	trusty/esm	*
Linux-manta	Ubuntu	utopic	*
Linux-manta	Ubuntu	vivid	*
Linux-manta	Ubuntu	wily	*

NVD	https://nvd.nist.gov/vuln/detail/CVE-2011-1149
CWE	https://cwe.mitre.org/data/definitions/264.html

Affected Software

References