CVE-2017-0466
HighSummary
A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process.
Risk Assessment
The risk to the organization involves the potential for remote code execution, which could lead to system compromise or data leakage.
Recommendation
It is recommended to update the Android system to the latest version to mitigate this vulnerability and to monitor systems for suspicious activity.
Other vulnerabilities in Mediaserver
See all- CVE-2017-0541High
CVE-2017-0541 is a remote code execution vulnerability in Mediaserver that can lead to memory corruption during media file processing. An attacker can exploit this issue using a specially crafted file.
- CVE-2017-0474High
A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process.
- CVE-2017-0473High
A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process.
- CVE-2017-0472High
A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process.
- CVE-2017-0471High
A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process.
- CVE-2017-0470High
A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process.
- CVE-2017-0469High
A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process.
- CVE-2017-0468High
A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process.
- CVE-2017-0467High
A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process.
- CVE-2017-0415High
CVE-2017-0415 is a privilege escalation vulnerability in Mediaserver that allows a local malicious application to execute arbitrary code within the context of a privileged process. This issue affects Android versions 6.0, 6.0.1, 7.0, and 7.1.1.
Original NVD description (English source)
A remote code execution vulnerability in Mediaserver could enable an attacker using a specially crafted file to cause memory corruption during media file and data processing. This issue is rated as Critical due to the possibility of remote code execution within the context of the Mediaserver process. Product: Android. Versions: 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33139050.