CVE-2014-3100 in Google Android

요약 (영어)

Stack-based buffer overflow in the encode_key function in /system/bin/keystore in the KeyStore service in Android 4.3 allows attackers to execute arbitrary code, and consequently obtain sensitive key information or bypass intended restrictions on cryptographic operations, via a long key name.

예약하다

2014. 04. 29.

공개

2014. 07. 02.

엔트리

VulDB provides additional information and datapoints for this CVE:

아이디	취약성	CWE	악용	대책	CVE
43528	Google Android Key Store getKeyForName 메모리 손상	119	입증되지 않음	공식 수정	CVE-2014-3100