high7.8
CVE-2014-7952
The backup mechanism in the adb tool in Android might allow attackers to inject additional applications (APKs) and execute arbitrary code by leveraging failure…
Impact
The backup mechanism in the adb tool in Android might allow attackers to inject additional applications (APKs) and execute arbitrary code by leveraging failure to filter application data streams.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Android | All versions |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/132645/ADB-Backup-APK-Injection.html
- http://seclists.org/fulldisclosure/2015/Jul/46
- http://www.search-lab.hu/about-us/news/110-android-adb-backup-apk-injection-vulnerability
- http://www.securityfocus.com/archive/1/535980/100/0/threaded
- http://www.securityfocus.com/bid/75705
- https://github.com/irsl/ADB-Backup-APK-Injection/
- http://packetstormsecurity.com/files/132645/ADB-Backup-APK-Injection.html
- http://seclists.org/fulldisclosure/2015/Jul/46
- http://www.search-lab.hu/about-us/news/110-android-adb-backup-apk-injection-vulnerability
- http://www.securityfocus.com/archive/1/535980/100/0/threaded
- http://www.securityfocus.com/bid/75705
- https://github.com/irsl/ADB-Backup-APK-Injection/