CVE Vulnerabilities

CVE-2016-6762

Published: Jan 12, 2017 | Modified: Jan 19, 2017
CVSS 3.x
7.8
HIGH
Source:
NVD
CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
CVSS 2.x
6.8 MEDIUM
AV:N/AC:M/Au:N/C:P/I:P/A:P
RedHat/V2
RedHat/V3
Ubuntu
MEDIUM

An elevation of privilege vulnerability in the libziparchive library could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0. Android ID: A-31251826.

Affected Software

Name Vendor Start Version End Version
Android Google 5.0 (including) 5.0 (including)
Android Google 5.0.1 (including) 5.0.1 (including)
Android Google 5.0.2 (including) 5.0.2 (including)
Android Google 5.1 (including) 5.1 (including)
Android Google 5.1.0 (including) 5.1.0 (including)
Android Google 5.1.1 (including) 5.1.1 (including)
Android Google 6.0 (including) 6.0 (including)
Android Google 6.0.1 (including) 6.0.1 (including)
Android Google 7.0 (including) 7.0 (including)
Android-platform-system-core Ubuntu artful *
Android-platform-system-core Ubuntu cosmic *
Android-platform-system-core Ubuntu esm-apps/xenial *
Android-platform-system-core Ubuntu upstream *
Android-platform-system-core Ubuntu xenial *
Android-platform-system-core Ubuntu yakkety *
Android-platform-system-core Ubuntu zesty *

References