high7.8Public exploit code
CVE-2011-3918
The Zygote process in Android 4.0.3 and earlier accepts fork requests from processes with arbitrary UIDs, which allows remote attackers to cause a denial of se…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Android Zygote - Socket and Fork Bomb (Denial of Service)2013-10-14 · dos · android
Impact
The Zygote process in Android 4.0.3 and earlier accepts fork requests from processes with arbitrary UIDs, which allows remote attackers to cause a denial of service (reboot loop) via a crafted application.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Android | through 4.0.3 Versions 1.0, 1.1, 1.5, 1.6, 2.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.ai-lab.it/merlo/publications/DoSAndroid.pdf
- https://code.google.com/p/android-source-browsing/source/detail?repo=platform--system--core&r=e7fd911fd42b
- http://www.ai-lab.it/merlo/publications/DoSAndroid.pdf
- https://code.google.com/p/android-source-browsing/source/detail?repo=platform--system--core&r=e7fd911fd42b