AndroidVulnerabilities.org

KillingInTheNameOf psneuter ashmem

(json)

• CVE numbers: CVE-2011-1149 [citation-needed]
• Coordinated disclosure?: false
• Categories: system, kernel
• Details: Android before 2.3 does not properly restrict access to the system property space, which allows local applications to bypass the application sandbox and gain privileges [citation-needed]
• Discovered by: on: Unknown
• Reported on: 2011-01-06 [c-skills-adb-trickery][archived]
• Fixed on: 2010-07-13 [ashmem-fix-core], 2010-07-15 [ashmem-fix-kernel]
• Fix released on: 2010-12-06 [citation-needed]
• Affected versions: 1.5 -- 2.2.2 [citation-needed] regex: (1.[5-9].[0-9])|(2.(([0-1].[0-9])|(2.[0-9])))
• Affected devices: all [citation-needed]
• Affected manufacturers: all [citation-needed]
• Fixed versions: 2.3 [citation-needed]
• Submission: by: Daniel R. Thomas, on: 2013-09-04