high7.5
CVE-2015-7888
Directory traversal vulnerability in the WifiHs20UtilityService on the Samsung S6 Edge LRX22G.G925VVRU1AOE2 allows remote attackers to overwrite or create arbi…
Impact
Directory traversal vulnerability in the WifiHs20UtilityService on the Samsung S6 Edge LRX22G.G925VVRU1AOE2 allows remote attackers to overwrite or create arbitrary files as the system-level user via a .. (dot dot) in the name of a file, compressed into a zipped file named cred.zip, and downloaded to /sdcard/Download.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Samsung | Galaxy S6 Edge Firmware | Version g925vvru1aoe2 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/134104/Samsung-WifiHs20UtilityService-Path-Traversal.html
- http://www.securityfocus.com/bid/77338
- https://bugs.chromium.org/p/project-zero/issues/detail?id=489&q=samsung&redir=1
- http://packetstormsecurity.com/files/134104/Samsung-WifiHs20UtilityService-Path-Traversal.html
- http://www.securityfocus.com/bid/77338
- https://bugs.chromium.org/p/project-zero/issues/detail?id=489&q=samsung&redir=1