AndroidVulnerabilities.org

Samsung WifiHs20UtilityService

(json)

• CVE numbers: CVE-2015-7888 [projectzero-489]
• Coordinated disclosure?: true
• Categories: system
• Details: A path traversal vulnerability was found in the WifiHs20UtilityService. This service is running on a Samsung S6 Edge device, and may be present on other Samsung device models. WifiHs20UtilityService reads any files placed in /sdcard/Download/cred.zip, and unzips this file into /data/bundle. Directory traversal in the path of the zipped contents allows an attacker to write a controlled file to an arbitrary path as the system user. [citation-needed]
• Discovered by: Mark Brand [projectzeroblog-huntinggalaxy] on: 2015-07-29 [citation-needed]
• Reported on: 2015-07-29 [citation-needed]
• Fixed on: 2015-10-22 [projectzero-489]
• Fix released on: Unknown
• Affected versions: regex:
• Affected devices: Samsung S6 Edge and may be present in other Samsung device models [projectzero-489]
• Affected manufacturers: Samsung [projectzero-489]
• Fixed versions:
• Submission: by: Daniel R. Thomas, on: 2016-03-18; by: Stephan Kollmann, on: 2015-10-14