CVE-2017-0416
HighSummary
A vulnerability in Audioserver allows a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities that are not normally accessible to third-party applications.
Risk Assessment
The risk to the organization is the potential for local malicious software to take control of the system, which could lead to unauthorized access to data and resources.
Recommendation
It is recommended to update the Android system to the latest version to mitigate the risk associated with this vulnerability.
Other vulnerabilities in Audioserver
See all- CVE-2017-0597High
A vulnerability in Audioserver allows a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application.
- CVE-2017-0545High
A vulnerability in Audioserver allows a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities that are not normally accessible to third-party applications.
- CVE-2017-0480High
A vulnerability in Audioserver allows a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities that are not normally accessible to third-party applications.
- CVE-2017-0479High
A vulnerability in Audioserver allows a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities that are not normally accessible to third-party applications.
- CVE-2017-0450High
A vulnerability in Audioserver allows a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as Moderate because it is mitigated by current platform configurations.
- CVE-2017-0419High
A vulnerability in Audioserver could allow a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application.
- CVE-2017-0418High
A vulnerability in Audioserver could allow a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities that are not normally accessible to third-party applications.
- CVE-2017-0417High
A vulnerability in Audioserver could allow a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application.
- CVE-2017-0385High
A vulnerability in Audioserver could allow a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities that are not normally accessible to third-party applications.
Original NVD description (English source)
An elevation of privilege vulnerability in Audioserver could enable a local malicious application to execute arbitrary code within the context of a privileged process. This issue is rated as High because it could be used to gain local access to elevated capabilities, which are not normally accessible to a third-party application. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32886609.