CVSS: 6.5EPSS: 0%CPEs: 2EXPL: 0CVE-2015-7190
https://notcve.org/view.php?id=CVE-2015-7190
05 Nov 2015 — The Search feature in Mozilla Firefox before 42.0 on Android through 4.4 supports search-engine URL registration through an intent and can access this URL in a privileged context in conjunction with the crash reporter, which allows attackers to read log files and visit file: URLs of HTML documents via a crafted application. La funcionalidad Search en Mozilla Firefox en versiones anteriores a 42.0 en Android hasta la versión 4.4 admite el registro URL del motor de búsqueda a través de un intent y pueden acce... • http://lists.opensuse.org/opensuse-security-announce/2015-11/msg00015.html • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 10.0EPSS: 0%CPEs: 1EXPL: 0CVE-2015-6609
https://notcve.org/view.php?id=CVE-2015-6609
03 Nov 2015 — libutils in Android before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted audio file, aka internal bug 22953624. libutils en Android en versiones anteriores a 5.1.1 LMY48X y 6.0 en versiones anteriores a 2015-11-01 permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria) a través de un archivo de audio manipulado, también conocido como error int... • http://www.securitytracker.com/id/1034049 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.8EPSS: 0%CPEs: 2EXPL: 0CVE-2015-6614
https://notcve.org/view.php?id=CVE-2015-6614
03 Nov 2015 — Telephony in Android 5.x before 5.1.1 LMY48X allows attackers to gain privileges, and consequently bypass intended network-interface restrictions, perform expensive data transfers, or cause a denial of service (call-reception outage or mute manipulation), via a crafted application, aka internal bug 21900139. Telephony en Android 5.x en versiones anteriores a 5.1.1 LMY48X permite a atacantes obtener privilegios y consecuentemente eludir las restricciones destinadas a la interfaz de red, realizar transferenci... • http://www.securitytracker.com/id/1034049 • CWE-264: Permissions, Privileges, and Access Controls •
CVSS: 7.5EPSS: 0%CPEs: 1EXPL: 0CVE-2015-8074
https://notcve.org/view.php?id=CVE-2015-8074
03 Nov 2015 — mediaserver in Android before 5.1.1 LMY48X allows remote attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, via unknown vectors, aka internal bugs 23540907 and 23515142, a different vulnerability than CVE-2015-6611. mediaserver en Android en versiones anteriores a 5.1.1 LMY48X permite a atacantes remotos obtener información sensible, y consecuentemente eludir un mecanismo de protección no especificado, a través de vectores desconocidos, también conocidos ... • https://groups.google.com/forum/message/raw?msg=android-security-updates/n1aw2MGce4E/jhpVEWDUCAAJ • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 8.4EPSS: 0%CPEs: 2EXPL: 0CVE-2015-6613
https://notcve.org/view.php?id=CVE-2015-6613
03 Nov 2015 — Bluetooth in Android before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows attackers to send commands to a debugging port, and consequently gain privileges, via a crafted application, as demonstrated by obtaining Signature or SignatureOrSystem access, aka internal bug 24371736. Bluetooth en Android en versiones anteriores a 5.1.1 LMY48X y 6.0 en versiones anteriores a 2015-11-01 permite a atacantes enviar comandos a un puerto de depuración, y consecuentemente obtener privilegios, a través de una aplicación m... • http://www.securitytracker.com/id/1034049 • CWE-77: Improper Neutralization of Special Elements used in a Command ('Command Injection') •
CVSS: 10.0EPSS: 0%CPEs: 2EXPL: 0CVE-2015-6610
https://notcve.org/view.php?id=CVE-2015-6610
03 Nov 2015 — libstagefright in Android before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows attackers to gain privileges or cause a denial of service (memory corruption) via a crafted application, aka internal bug 23707088. libstagefright en Android en versiones anteriores a 5.1.1 LMY48X y 6.0 en versiones anteriores a 2015-11-01 permite a atacantes obtener privilegios o provocar una denegación de servicio (corrupción de memoria) a través de una aplicación manipulada, también conocido como error interno 23707088. • http://www.securitytracker.com/id/1034049 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 10.0EPSS: 0%CPEs: 2EXPL: 0CVE-2015-8072
https://notcve.org/view.php?id=CVE-2015-8072
03 Nov 2015 — mediaserver in Android 4.4 through 5.x before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 23881715, a different vulnerability than CVE-2015-6608 and CVE-2015-8073. mediaserver en Android 4.4 hasta la versión 5.x en versiones anteriores a 5.1.1 LMY48X y 6.0 en versiones anteriores a 2015-11-01 permite a atacantes remotos ejecutar código arbitrario o provocar una denegación ... • https://groups.google.com/forum/message/raw?msg=android-security-updates/n1aw2MGce4E/jhpVEWDUCAAJ • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.5EPSS: 0%CPEs: 2EXPL: 0CVE-2015-6611
https://notcve.org/view.php?id=CVE-2015-6611
03 Nov 2015 — mediaserver in Android before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows remote attackers to obtain sensitive information, and consequently bypass an unspecified protection mechanism, via unknown vectors, aka internal bugs 23905951, 23912202, 23953967, 23696300, 23600291, 23756261, 23541506, 23284974, 23542351, and 23542352, a different vulnerability than CVE-2015-8074. mediaserver en Android en versiones anteriores a 5.1.1 LMY48X y 6.0 en versiones anteriores a 2015-11-01 permite a atacantes remotos obt... • http://www.securitytracker.com/id/1034049 • CWE-200: Exposure of Sensitive Information to an Unauthorized Actor •
CVSS: 10.0EPSS: 0%CPEs: 2EXPL: 0CVE-2015-8073
https://notcve.org/view.php?id=CVE-2015-8073
03 Nov 2015 — mediaserver in Android 4.4 and 5.1 before 5.1.1 LMY48X allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bug 14388161, a different vulnerability than CVE-2015-6608 and CVE-2015-8072. mediaserver en Android 4.4 y 5.1 en versiones anteriores a 5.1.1 LMY48X permite a atacantes remotos ejecutar código arbitrario o provocar una denegación de servicio (corrupción de memoria) a través de un archivo multimedia manipulado, tambié... • https://groups.google.com/forum/message/raw?msg=android-security-updates/n1aw2MGce4E/jhpVEWDUCAAJ • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 10.0EPSS: 0%CPEs: 2EXPL: 0CVE-2015-6608
https://notcve.org/view.php?id=CVE-2015-6608
03 Nov 2015 — mediaserver in Android 5.x before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bugs 19779574, 23680780, 23876444, and 23658148, a different vulnerability than CVE-2015-8072 and CVE-2015-8073. mediaserver en Android 5.x en versiones anteriores a 5.1.1 LMY48X y 6.0 en versiones anteriores a 2015-11-01 permite a atacantes remotos ejecutar código arbitrario o provocar una denegació... • http://www.securitytracker.com/id/1034049 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •