2 lines
3.0 KiB
JSON
2 lines
3.0 KiB
JSON
{"affected":[{"affectedData":[{"product":"Android","vendor":"Google Inc.","versions":[{"status":"affected","version":"Kernel-3.18"}]}],"source":"security@android.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:linux:linux_kernel:3.18:*:*:*:*:*:*:*","matchCriteriaId":"364CAD86-F652-4B84-932A-A8D9146C9010","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"An elevation of privilege vulnerability in the Synaptics Touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the kernel. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.18. Android ID: A-34325986."},{"lang":"es","value":"Vulnerabilidad de elevación de privilegios en el controlador Synaptics Touchscreen podría permitir que una aplicación maliciosa local ejecute código arbitrario dentro del contexto del kernel. Este problema se califica como alto porque primero requiere comprometer un proceso privilegiado. Producto: Android. Versiones: Kernel-3.18. ID de Android: A-34325986."}],"id":"CVE-2017-0580","lastModified":"2026-06-17T00:57:57.493","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"HIGH","cvssData":{"accessComplexity":"HIGH","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"COMPLETE","baseScore":7.6,"confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","version":"2.0"},"exploitabilityScore":4.9,"impactScore":10.0,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":true}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.0,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.0"},"exploitabilityScore":1.0,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2017-04-07T22:59:01.590","references":[{"source":"security@android.com","url":"http://www.securityfocus.com/bid/97335"},{"source":"security@android.com","url":"http://www.securitytracker.com/id/1038201"},{"source":"security@android.com","tags":["Patch","Vendor Advisory"],"url":"https://source.android.com/security/bulletin/2017-04-01"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"http://www.securityfocus.com/bid/97335"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"http://www.securitytracker.com/id/1038201"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"url":"https://source.android.com/security/bulletin/2017-04-01"}],"sourceIdentifier":"security@android.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"NVD-CWE-noinfo"}],"source":"nvd@nist.gov","type":"Primary"}]}
|