~ubuntu-security/ubuntu-cve-tracker/master

« back to all changes in this revision

Viewing changes to retired/CVE-2017-0396

  • Committer: Steve Beattie
  • Date: 2019-02-19 06:18:27 UTC
  • Revision ID: sbeattie@ubuntu.com-20190219061827-oh57fzcfc1u9dlfk
The ubuntu-cve-tracker project has been converted to git.

Please use 'git clone https://git.launchpad.net/ubuntu-cve-tracker' to
get the converted tree.

Show diffs side-by-side

added added

removed removed

Lines of Context:
1
 
Candidate: CVE-2017-0396
2
 
PublicDate: 2017-01-12
3
 
References:
4
 
 https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-0396
5
 
 https://android.googlesource.com/platform/frameworks/av/+/557bd7bfe6c4895faee09e46fc9b5304a956c8b7
6
 
 https://source.android.com/security/bulletin/2017-01-01.html
7
 
Description:
8
 
 An information disclosure vulnerability in visualizer/EffectVisualizer.cpp
9
 
 in libeffects in Mediaserver could enable a local malicious application to
10
 
 access data outside of its permission levels. This issue is rated as
11
 
 Moderate because it could be used to access sensitive data without
12
 
 permission. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1,
13
 
 7.0, 7.1. Android ID: A-31781965.
14
 
Ubuntu-Description:
15
 
Notes:
16
 
Bugs:
17
 
Priority: medium
18
 
Discovered-by:
19
 
Assigned-to:
20
 
 
21
 
Patches_android:
22
 
upstream_android: needs-triage
23
 
precise_android: DNE
24
 
precise/esm_android: DNE
25
 
trusty_android: ignored (abandoned)
26
 
vivid/stable-phone-overlay_android: ignored (reached end-of-life)
27
 
vivid/ubuntu-core_android: DNE
28
 
xenial_android: ignored (abandoned)
29
 
yakkety_android: ignored (reached end-of-life)
30
 
zesty_android: ignored (reached end-of-life)
31
 
artful_android: DNE
32
 
bionic_android: DNE
33
 
devel_android: DNE