medium5.5
CVE-2017-0420
An information disclosure vulnerability in AOSP Mail could enable a local malicious application to bypass operating system protections that isolate application…
Impact
An information disclosure vulnerability in AOSP Mail could enable a local malicious application to bypass operating system protections that isolate application data from other applications. This issue is rated as High because it could be used to gain access to data that the application does not have access to. Product: Android. Versions: 4.4.4, 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-32615212.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Android | Versions 4.0, 4.0.1, 4.0.2, 4.0.3, 4.0.4, 4.1 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.securityfocus.com/bid/96093
- http://www.securitytracker.com/id/1037798
- https://source.android.com/security/bulletin/2017-02-01.html
- http://www.securityfocus.com/bid/96093
- http://www.securitytracker.com/id/1037798
- https://source.android.com/security/bulletin/2017-02-01.html