2 lines
7.1 KiB
JSON
2 lines
7.1 KiB
JSON
{"affected":[{"affectedData":[{"product":"Android","vendor":"Google Inc.","versions":[{"status":"affected","version":"Android-4.4.4"},{"status":"affected","version":"Android-5.0.2"},{"status":"affected","version":"Android-5.1.1"},{"status":"affected","version":"Android-6.0"},{"status":"affected","version":"Android-6.0.1"},{"status":"affected","version":"Android-7.0"},{"status":"affected","version":"Android-7.1.1"}]}],"source":"security@android.com"}],"configurations":[{"nodes":[{"cpeMatch":[{"criteria":"cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*","matchCriteriaId":"A39C31E3-75C0-4E92-A6B5-7D67B22E3449","vulnerable":true},{"criteria":"cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*","matchCriteriaId":"BB318EA4-2908-4B91-8DBB-20008FDF528A","vulnerable":true},{"criteria":"cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*","matchCriteriaId":"1F4E46A9-B652-47CE-92E8-01021E57724B","vulnerable":true},{"criteria":"cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*","matchCriteriaId":"AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93","vulnerable":true},{"criteria":"cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*","matchCriteriaId":"36DD8E3F-6308-4680-B932-4CBD8E58A7FB","vulnerable":true},{"criteria":"cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*","matchCriteriaId":"1DA9F0F7-D592-481E-884C-B1A94E702825","vulnerable":true},{"criteria":"cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*","matchCriteriaId":"6CD857E7-B878-49F9-BDDA-93DDEBB0B42B","vulnerable":true},{"criteria":"cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*","matchCriteriaId":"FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1","vulnerable":true},{"criteria":"cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*","matchCriteriaId":"A47AB858-36DE-4330-8CAC-1B46C5C8DA80","vulnerable":true},{"criteria":"cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*","matchCriteriaId":"49413FF7-7910-4F74-B106-C3170612CB2A","vulnerable":true},{"criteria":"cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*","matchCriteriaId":"A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B","vulnerable":true},{"criteria":"cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*","matchCriteriaId":"A8882E50-7C49-4A99-91F2-DF979CF8BB2F","vulnerable":true},{"criteria":"cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*","matchCriteriaId":"98C32982-095C-4628-9958-118A3D3A9CAA","vulnerable":true},{"criteria":"cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*","matchCriteriaId":"8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1","vulnerable":true},{"criteria":"cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*","matchCriteriaId":"EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D","vulnerable":true},{"criteria":"cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*","matchCriteriaId":"FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42","vulnerable":true},{"criteria":"cpe:2.3:o:google:android:4.4.4:*:*:*:*:*:*:*","matchCriteriaId":"E3CEEA22-63B4-4702-A400-01349DF0EC1E","vulnerable":true},{"criteria":"cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*","matchCriteriaId":"7C4E6353-B77A-464F-B7DE-932704003B33","vulnerable":true},{"criteria":"cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*","matchCriteriaId":"77125688-2CCA-4990-ABB2-551D47CB0CDD","vulnerable":true},{"criteria":"cpe:2.3:o:google:android:5.0.2:*:*:*:*:*:*:*","matchCriteriaId":"E9915371-C730-41F7-B86E-7E4DE0DF5385","vulnerable":true},{"criteria":"cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*","matchCriteriaId":"E7A8EC00-266C-409B-AD43-18E8DFCD6FE3","vulnerable":true},{"criteria":"cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*","matchCriteriaId":"B846C63A-7261-481E-B4A4-0D8C79E0D8A7","vulnerable":true},{"criteria":"cpe:2.3:o:google:android:5.1.1:*:*:*:*:*:*:*","matchCriteriaId":"B1D94CDD-DE7B-444E-A3AE-AE9C9A779374","vulnerable":true},{"criteria":"cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*","matchCriteriaId":"E70C6D8D-C9C3-4D92-8DFC-71F59E068295","vulnerable":true},{"criteria":"cpe:2.3:o:google:android:6.0.1:*:*:*:*:*:*:*","matchCriteriaId":"691FA41B-C2CE-413F-ABB1-0B22CB322807","vulnerable":true},{"criteria":"cpe:2.3:o:google:android:7.0:*:*:*:*:*:*:*","matchCriteriaId":"09E6085C-A61E-4A89-BF80-EDD9A7DF1E47","vulnerable":true},{"criteria":"cpe:2.3:o:google:android:7.1.0:*:*:*:*:*:*:*","matchCriteriaId":"FC30B2A2-9674-4052-B402-20348E50F9E8","vulnerable":true},{"criteria":"cpe:2.3:o:google:android:7.1.1:*:*:*:*:*:*:*","matchCriteriaId":"D835D592-2423-44C6-804A-3AD010112E7C","vulnerable":true}],"negate":false,"operator":"OR"}]}],"cveTags":[],"descriptions":[{"lang":"en","value":"An elevation of privilege vulnerability in SurfaceFlinger could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32628763."},{"lang":"es","value":"Vulnerabilidad de elevación de privilegios en SurfaceFlinger podría permitir que una aplicación maliciosa local ejecute código arbitrario dentro del contexto de un proceso privilegiado. Este problema se califica como alto porque podría utilizarse para obtener acceso local a capacidades elevadas, que normalmente no son accesibles a una aplicación de terceros. Producto: Android. Versiones: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. ID de Android: A-32628763."}],"id":"CVE-2017-0546","lastModified":"2026-06-17T00:57:53.810","metrics":{"cvssMetricV2":[{"acInsufInfo":false,"baseSeverity":"HIGH","cvssData":{"accessComplexity":"MEDIUM","accessVector":"NETWORK","authentication":"NONE","availabilityImpact":"COMPLETE","baseScore":9.3,"confidentialityImpact":"COMPLETE","integrityImpact":"COMPLETE","vectorString":"AV:N/AC:M/Au:N/C:C/I:C/A:C","version":"2.0"},"exploitabilityScore":8.6,"impactScore":10.0,"obtainAllPrivilege":false,"obtainOtherPrivilege":false,"obtainUserPrivilege":false,"source":"nvd@nist.gov","type":"Primary","userInteractionRequired":true}],"cvssMetricV30":[{"cvssData":{"attackComplexity":"LOW","attackVector":"LOCAL","availabilityImpact":"HIGH","baseScore":7.8,"baseSeverity":"HIGH","confidentialityImpact":"HIGH","integrityImpact":"HIGH","privilegesRequired":"NONE","scope":"UNCHANGED","userInteraction":"REQUIRED","vectorString":"CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","version":"3.0"},"exploitabilityScore":1.8,"impactScore":5.9,"source":"nvd@nist.gov","type":"Primary"}]},"published":"2017-04-07T22:59:00.497","references":[{"source":"security@android.com","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/97341"},{"source":"security@android.com","url":"http://www.securitytracker.com/id/1038201"},{"source":"security@android.com","tags":["Vendor Advisory"],"url":"https://source.android.com/security/bulletin/2017-04-01"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Third Party Advisory","VDB Entry"],"url":"http://www.securityfocus.com/bid/97341"},{"source":"af854a3a-2127-422b-91ae-364da2661108","url":"http://www.securitytracker.com/id/1038201"},{"source":"af854a3a-2127-422b-91ae-364da2661108","tags":["Vendor Advisory"],"url":"https://source.android.com/security/bulletin/2017-04-01"}],"sourceIdentifier":"security@android.com","vulnStatus":"Modified","weaknesses":[{"description":[{"lang":"en","value":"CWE-476"}],"source":"nvd@nist.gov","type":"Primary"}]}
|