CVE-2011-3874 Stack-based buffer overflow in libsysutils in Android 2.2.x through 2.2.2 and 2.3.x through 2.3.6 allows user-assisted remote attackers to execute arbitrary code via an application that calls the Fram...
HighCVSS 9.3
EPSS 11.4%
- Published
- Updated
- Exploit status
- No public exploit known
Description
Stack-based buffer overflow in libsysutils in Android 2.2.x through 2.2.2 and 2.3.x through 2.3.6 allows user-assisted remote attackers to execute arbitrary code via an application that calls the FrameworkListener::dispatchCommand method with the wrong number of arguments, as demonstrated by zergRush to trigger a use-after-free error.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Google Android | = 2.2 | No fix listed |
| Google Android | = 2.2-rev1 | No fix listed |
| Google Android | = 2.2.1 | No fix listed |
| Google Android | = 2.2.2 | No fix listed |
| Google Android | = 2.3 | No fix listed |
| Google Android | = 2.3-rev1 | No fix listed |
| Google Android | = 2.3.1 | No fix listed |
| Google Android | = 2.3.2 | No fix listed |
| Google Android | = 2.3.3 | No fix listed |
| Google Android | = 2.3.4 | No fix listed |
| Google Android | = 2.3.5 | No fix listed |
| Google Android | = 2.3.6 | No fix listed |