2 lines
3.1 KiB
JSON
2 lines
3.1 KiB
JSON
{"affected":[{"affectedData":[{"product":"Android","vendor":"Google Inc.","versions":[{"status":"affected","version":"Kernel-3.10"}]}],"source":"security@android.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*","matchCriteriaId":"1C37F47C-C217-4BCF-A758-14E1BDBAD63D","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"An elevation of privilege vulnerability in the HTC OEM fastboot command could enable a local malicious application to execute arbitrary code within the context of the sensor hub. This issue is rated as Moderate because it first requires exploitation of separate vulnerabilities. Product: Android. Versions: Kernel-3.10. Android ID: A-33178836."},{"lang":"es","value":"Vulnerabilidad de elevación de privilegios en el comando HTC OEM fastboot podría permitir que una aplicación maliciosa local ejecute código arbitrario dentro del contexto del concentrador de sensores. Este problema se califica como moderado porque primero requiere la explotación de vulnerabilidades separadas. Producto: Android. Versiones: Kernel-3.10. ID de Android: A-33178836."}],"id":"CVE-2017-0582","lastModified":"2026-06-17T00:57:57.703","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"HIGH","cvssData":{"accessComplexity":"HIGH","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"COMPLETE","baseScore":7.6,"confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","vectorString":"AV:N/AC:H/Au:N/C:C/I:C/A:C","version":"2.0"},"exploitabilityScore":4.9,"impactScore":10.0,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":true}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"HIGH","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.0,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.0"},"exploitabilityScore":1.0,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2017-04-07T22:59:01.637","references":[{"source":"security@android.com","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/97356"},{"source":"security@android.com","url":"http://www.securitytracker.com/id/1038201"},{"source":"security@android.com","tags":["Patch","Vendor Advisory"],"url":"https://source.android.com/security/bulletin/2017-04-01"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/97356"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"http://www.securitytracker.com/id/1038201"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Patch","Vendor Advisory"],"url":"https://source.android.com/security/bulletin/2017-04-01"}],"sourceIdentifier":"security@android.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"NVD-CWE-noinfo"}],"source":"nvd@nist.gov","type":"Primary"}]}
|