Back to all years

2010

WebKit Use-After-Free

(json)

• CVE numbers: CVE-2010-1119 [citation-needed]
• Coordinated disclosure?: unknown
• Categories: system, app
• Details: A vulnerability in the WebKit browser engine allows a malicious webpage to perform remote code execution [webkit-use-after-free-exploit-db]
• Discovered by: MJ Keith [webkit-use-after-free-exploit-db] on: 2011-03-11 [webkit-use-after-free-exploit-db]
• Reported on: Unknown
• Fixed on: Unknown
• Fix released on: 2010-05-20 [citation-needed]
• Affected versions: 2.0-2.1.1 [webkit-use-after-free-exploit-db] regex: (2.0.[0-9])|(2.1.[0-1])
• Affected devices: all [citation-needed]
• Affected manufacturers: all [citation-needed]
• Fixed versions: 2.2 [citation-needed]
• Submission: by: Daniel Carter, on: 2019-07-03

KillingInTheNameOf psneuter ashmem

(json)

• CVE numbers: CVE-2011-1149 [citation-needed]
• Coordinated disclosure?: false
• Categories: system, kernel
• Details: Android before 2.3 does not properly restrict access to the system property space, which allows local applications to bypass the application sandbox and gain privileges [citation-needed]
• Discovered by: on: Unknown
• Reported on: 2011-01-06 [c-skills-adb-trickery][archived]
• Fixed on: 2010-07-13 [ashmem-fix-core], 2010-07-15 [ashmem-fix-kernel]
• Fix released on: 2010-12-06 [citation-needed]
• Affected versions: 1.5 -- 2.2.2 [citation-needed] regex: (1.[5-9].[0-9])|(2.(([0-1].[0-9])|(2.[0-9])))
• Affected devices: all [citation-needed]
• Affected manufacturers: all [citation-needed]
• Fixed versions: 2.3 [citation-needed]
• Submission: by: Daniel R. Thomas, on: 2013-09-04

exploid udev

(json)

• CVE numbers: CVE-2009-1185 [citation-needed]
• Coordinated disclosure?: false
• Categories: kernel
• Details: udev before 1.4.1 does not verify whether a NETLINK message originates from kernel space, which allows local users to gain privileges by sending a NETLINK message from user space. [CVE-2009-1185]
• Discovered by: Sebastian ??? [c-skills-android-trickery][archived] on: 2010-07-15 [c-skills-android-trickery][archived]
• Reported on: 2010-07-15 [c-skills-android-trickery][archived]
• Fixed on: 2011-04-18 [netd-udev-fix]
• Fix released on: 2011-07-25 [sprint-2.3.5-release#0][sprint-2.3.5-release#1]
• Affected versions: 1.0-2.3.4 [citation-needed] regex: (1.[0-9].[0-9])|(2.(([0-2].[0-9])|(3.[0-4])))
• Affected devices: all [citation-needed]
• Affected manufacturers: all [citation-needed]
• Fixed versions: 2.3.5_r1 [netd-udev-fix]
• Submission: by: Daniel R. Thomas, on: 2013-09-04

RageAgainstTheCage adb

(json)

• CVE numbers: CVE-2010-EASY [intrepidus-looking-at-c-skills][archived]
• Coordinated disclosure?: false
• Categories: system
• Details: adb fails to check setuid return code and this can be caused to fail by the shell user already having RLIMIT_NPROC processes. [citation-needed]
• Discovered by: Sebastian Krahmer [thesnkchrmr-ratc][archived] on: 2010-08-21 [c-skills-droid2][archived]
• Reported on: Unknown
• Fixed on: 2010-08-27 [rageagainstthecage-adb-patch]
• Fix released on: Unknown
• Affected versions: 1.6_r1-2.2_r1 [adb-setuid-bug-patch] regex: (1.[6-9].[0-9])|(2.((1.[0-9])|(2.0)))
• Affected devices: Droid2, backflip and evo [c-skills-droid2][archived]
• Affected manufacturers: all [rageagainstthecage-adb-patch]
• Fixed versions: 2.2.2 and greater [android-security-2010-EASY-patches][archived], 2.2_r8, 2.3_r1 [rageagainstthecage-adb-patch]
• Submission: by: Daniel R. Thomas, on: 2013-09-05

RageAgainstTheCage zygote

(json)

• CVE numbers: ANDROID-3176774 [citation-needed]
• Coordinated disclosure?: false
• Categories: system
• Details: Also known as Zimperlich [c-skills-zimperlich][archived]
• Discovered by: on: Unknown
• Reported on: Unknown
• Fixed on: 2010-08-30 [dalvik-zygote], 2010-11-08 [dalvik-zygote-cherry]
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices:
• Affected manufacturers: all [citation-needed]
• Fixed versions: 2.3.1_r1 [dalvik-zygote]
• Submission: by: Daniel R. Thomas, on: 2013-09-06

Zysploit

(json)

• CVE numbers:
• Coordinated disclosure?: false
• Categories: system
• Details: Takes advantage of a setuid vulnerability (few details available) [citation-needed]
• Discovered by: Joshua Wise [zysploit-rootwiki][archived] on: Unknown
• Reported on: 2010-09-07 [zysploit-rootwiki][archived]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: Up to 2.2 [zysploit-rootwiki][archived] regex: (1.[0-9].[0-9])|(2.[0-1].[0-9])
• Affected devices: Sprint EVO 4G (HTC Supersonic), Droid Incredible (HTC Incredible), HTC Desire GSM, HTC Desire CDMA (HTC BravoC), HTC Aria, Droid Eris (HTC DesireC), HTC Wildfire (HTC Buzz) [zysploit-rootwiki][archived]
• Affected manufacturers: HTC [zysploit-rootwiki][archived]
• Fixed versions:
• Submission: by: Daniel Carter, on: 2019-07-03

Use-After-Free Remote

(json)

• CVE numbers: CVE-2010-1807 [webkit-use-after-free-mitre]
• Coordinated disclosure?: false
• Categories: system
• Details: WebKit does not properly validate floating-point data in Android versions prior to 2.2, which allows a remote arbitrary code execution attack to occur through a crafted HTML page [webkit-use-after-free-mitre]
• Discovered by: Itzhak Avraham [exploit-db-webkit-use-after-free] on: Unknown
• Reported on: 2010-11-14 [exploit-db-webkit-use-after-free]
• Fixed on: Unknown
• Fix released on: Unknown
• Affected versions: Up to 2.2 [exploit-db-webkit-use-after-free] regex: (1.[0-9].[0-9])|(2.[0-1].[0-9])
• Affected devices: all [citation-needed]
• Affected manufacturers: all [citation-needed]
• Fixed versions: 2.2 [citation-needed]
• Submission: by: Daniel Carter, on: 2019-06-28