Vulnerability-Lookup - Search a vulnerability

var-201212-0246

Vulnerability from variot

The kernel in Samsung Galaxy S2, Galaxy Note 2, MEIZU MX, and possibly other Android devices, when running an Exynos 4210 or 4412 processor, uses weak permissions (0666) for /dev/exynos-mem, which allows attackers to read or write arbitrary physical memory and gain privileges via a crafted application, as demonstrated by ExynosAbuse. Samsung Galaxy S II, Galaxy S III, Galaxy Note II, etc. are Samsung-issued smartphone devices. Because the system does not properly set the /dev/exynos-mem privilege (the default is any user globally readable and writable) and the device maps all current physical memory space, allowing local attackers to exploit the vulnerability to gain root privileges

Show details on source website

JSON

To clipboard

{
  "@context": {
    "@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
    "affected_products": {
      "@id": "https://www.variotdbs.pl/ref/affected_products"
    },
    "configurations": {
      "@id": "https://www.variotdbs.pl/ref/configurations"
    },
    "credits": {
      "@id": "https://www.variotdbs.pl/ref/credits"
    },
    "cvss": {
      "@id": "https://www.variotdbs.pl/ref/cvss/"
    },
    "description": {
      "@id": "https://www.variotdbs.pl/ref/description/"
    },
    "exploit_availability": {
      "@id": "https://www.variotdbs.pl/ref/exploit_availability/"
    },
    "external_ids": {
      "@id": "https://www.variotdbs.pl/ref/external_ids/"
    },
    "iot": {
      "@id": "https://www.variotdbs.pl/ref/iot/"
    },
    "iot_taxonomy": {
      "@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
    },
    "patch": {
      "@id": "https://www.variotdbs.pl/ref/patch/"
    },
    "problemtype_data": {
      "@id": "https://www.variotdbs.pl/ref/problemtype_data/"
    },
    "references": {
      "@id": "https://www.variotdbs.pl/ref/references/"
    },
    "sources": {
      "@id": "https://www.variotdbs.pl/ref/sources/"
    },
    "sources_release_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_release_date/"
    },
    "sources_update_date": {
      "@id": "https://www.variotdbs.pl/ref/sources_update_date/"
    },
    "threat_type": {
      "@id": "https://www.variotdbs.pl/ref/threat_type/"
    },
    "title": {
      "@id": "https://www.variotdbs.pl/ref/title/"
    },
    "type": {
      "@id": "https://www.variotdbs.pl/ref/type/"
    }
  },
  "@id": "https://www.variotdbs.pl/vuln/VAR-201212-0246",
  "affected_products": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/affected_products#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "model": "galaxy s2",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "samsung",
        "version": null
      },
      {
        "model": "galaxy note 2",
        "scope": "eq",
        "trust": 1.6,
        "vendor": "samsung",
        "version": null
      },
      {
        "model": "mx",
        "scope": "eq",
        "trust": 1.0,
        "vendor": "meizu",
        "version": null
      },
      {
        "model": "mx",
        "scope": null,
        "trust": 0.8,
        "vendor": "meizu",
        "version": null
      },
      {
        "model": "galaxy note",
        "scope": null,
        "trust": 0.8,
        "vendor": "samsung",
        "version": null
      },
      {
        "model": "galaxy s",
        "scope": null,
        "trust": 0.8,
        "vendor": "samsung",
        "version": null
      },
      {
        "model": "galaxy s iii",
        "scope": null,
        "trust": 0.6,
        "vendor": "samsung",
        "version": null
      },
      {
        "model": "galaxy s ii",
        "scope": null,
        "trust": 0.6,
        "vendor": "samsung",
        "version": null
      },
      {
        "model": "galaxy note ii",
        "scope": null,
        "trust": 0.6,
        "vendor": "samsung",
        "version": null
      },
      {
        "model": "m",
        "scope": null,
        "trust": 0.6,
        "vendor": "meizu",
        "version": null
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2012-7515"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-005729"
      },
      {
        "db": "NVD",
        "id": "CVE-2012-6422"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201212-232"
      }
    ]
  },
  "configurations": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/configurations#",
      "children": {
        "@container": "@list"
      },
      "cpe_match": {
        "@container": "@list"
      },
      "data": {
        "@container": "@list"
      },
      "nodes": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "CVE_data_version": "4.0",
        "nodes": [
          {
            "children": [],
            "cpe_match": [
              {
                "cpe23Uri": "cpe:2.3:h:samsung:galaxy_s2:-:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:h:meizu:mx:-:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              },
              {
                "cpe23Uri": "cpe:2.3:h:samsung:galaxy_note_2:-:*:*:*:*:*:*:*",
                "cpe_name": [],
                "vulnerable": true
              }
            ],
            "operator": "OR"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2012-6422"
      }
    ]
  },
  "cve": "CVE-2012-6422",
  "cvss": {
    "@context": {
      "cvssV2": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
      },
      "cvssV3": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
      },
      "severity": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/cvss/severity#"
        },
        "@id": "https://www.variotdbs.pl/ref/cvss/severity"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        },
        "@id": "https://www.variotdbs.pl/ref/sources"
      }
    },
    "data": [
      {
        "cvssV2": [
          {
            "acInsufInfo": false,
            "accessComplexity": "MEDIUM",
            "accessVector": "NETWORK",
            "authentication": "NONE",
            "author": "NVD",
            "availabilityImpact": "COMPLETE",
            "baseScore": 9.3,
            "confidentialityImpact": "COMPLETE",
            "exploitabilityScore": 8.6,
            "impactScore": 10.0,
            "integrityImpact": "COMPLETE",
            "obtainAllPrivilege": false,
            "obtainOtherPrivilege": false,
            "obtainUserPrivilege": false,
            "severity": "HIGH",
            "trust": 1.0,
            "userInteractionRequired": true,
            "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          },
          {
            "acInsufInfo": null,
            "accessComplexity": "Medium",
            "accessVector": "Network",
            "authentication": "None",
            "author": "NVD",
            "availabilityImpact": "Complete",
            "baseScore": 9.3,
            "confidentialityImpact": "Complete",
            "exploitabilityScore": null,
            "id": "CVE-2012-6422",
            "impactScore": null,
            "integrityImpact": "Complete",
            "obtainAllPrivilege": null,
            "obtainOtherPrivilege": null,
            "obtainUserPrivilege": null,
            "severity": "High",
            "trust": 0.8,
            "userInteractionRequired": null,
            "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
            "version": "2.0"
          }
        ],
        "cvssV3": [],
        "severity": [
          {
            "author": "NVD",
            "id": "CVE-2012-6422",
            "trust": 1.8,
            "value": "HIGH"
          },
          {
            "author": "CNNVD",
            "id": "CNNVD-201212-232",
            "trust": 0.6,
            "value": "CRITICAL"
          }
        ]
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-005729"
      },
      {
        "db": "NVD",
        "id": "CVE-2012-6422"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201212-232"
      }
    ]
  },
  "description": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/description#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "The kernel in Samsung Galaxy S2, Galaxy Note 2, MEIZU MX, and possibly other Android devices, when running an Exynos 4210 or 4412 processor, uses weak permissions (0666) for /dev/exynos-mem, which allows attackers to read or write arbitrary physical memory and gain privileges via a crafted application, as demonstrated by ExynosAbuse. Samsung Galaxy S II, Galaxy S III, Galaxy Note II, etc. are Samsung-issued smartphone devices. Because the system does not properly set the /dev/exynos-mem privilege (the default is any user globally readable and writable) and the device maps all current physical memory space, allowing local attackers to exploit the vulnerability to gain root privileges",
    "sources": [
      {
        "db": "NVD",
        "id": "CVE-2012-6422"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-005729"
      },
      {
        "db": "CNVD",
        "id": "CNVD-2012-7515"
      }
    ],
    "trust": 2.16
  },
  "external_ids": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/external_ids#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "db": "NVD",
        "id": "CVE-2012-6422",
        "trust": 3.0
      },
      {
        "db": "OSVDB",
        "id": "88467",
        "trust": 1.6
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-005729",
        "trust": 0.8
      },
      {
        "db": "CNVD",
        "id": "CNVD-2012-7515",
        "trust": 0.6
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201212-232",
        "trust": 0.6
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2012-7515"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-005729"
      },
      {
        "db": "NVD",
        "id": "CVE-2012-6422"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201212-232"
      }
    ]
  },
  "id": "VAR-201212-0246",
  "iot": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": true,
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2012-7515"
      }
    ],
    "trust": 1.233272956
  },
  "iot_taxonomy": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/iot_taxonomy#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "category": [
          "Network device"
        ],
        "sub_category": null,
        "trust": 0.6
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2012-7515"
      }
    ]
  },
  "last_update_date": "2023-12-18T14:02:06.441000Z",
  "patch": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/patch#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "title": "Top Page",
        "trust": 0.8,
        "url": "http://en.meizu.com/"
      },
      {
        "title": "GALAXY S",
        "trust": 0.8,
        "url": "http://www.samsung.com/jp/galaxys2/"
      },
      {
        "title": "GALAXY Note",
        "trust": 0.8,
        "url": "http://www.samsung.com/jp/consumer/mobilephone/mobilephone/galaxy-note"
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-005729"
      }
    ]
  },
  "problemtype_data": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "problemtype": "CWE-264",
        "trust": 1.8
      }
    ],
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-005729"
      },
      {
        "db": "NVD",
        "id": "CVE-2012-6422"
      }
    ]
  },
  "references": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/references#",
      "data": {
        "@container": "@list"
      },
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": [
      {
        "trust": 1.6,
        "url": "http://arstechnica.com/security/2012/12/developer-warns-of-critical-vulnerability-in-many-samsung-smartphones/"
      },
      {
        "trust": 1.6,
        "url": "http://forum.xda-developers.com/showthread.php?p=35469999"
      },
      {
        "trust": 1.6,
        "url": "http://forum.xda-developers.com/showthread.php?t=2051290"
      },
      {
        "trust": 1.6,
        "url": "http://osvdb.org/88467"
      },
      {
        "trust": 1.6,
        "url": "http://project-voodoo.org/articles/instant-fix-app-for-exynos-mem-abuse-vulnerability-no-root-required-reversible"
      },
      {
        "trust": 1.6,
        "url": "http://www.sammobile.com/2012/12/16/major-vulnerability-found-on-exynos-4-devices/"
      },
      {
        "trust": 1.6,
        "url": "http://www.securityweek.com/new-vulnerability-exposed-samsungs-android-devices"
      },
      {
        "trust": 0.8,
        "url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2012-6422"
      },
      {
        "trust": 0.8,
        "url": "http://web.nvd.nist.gov/view/vuln/detail?vulnid=cve-2012-6422"
      },
      {
        "trust": 0.6,
        "url": "http://forum.xda-developers.com/showthread.php?t=2048511"
      }
    ],
    "sources": [
      {
        "db": "CNVD",
        "id": "CNVD-2012-7515"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-005729"
      },
      {
        "db": "NVD",
        "id": "CVE-2012-6422"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201212-232"
      }
    ]
  },
  "sources": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "db": "CNVD",
        "id": "CNVD-2012-7515"
      },
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-005729"
      },
      {
        "db": "NVD",
        "id": "CVE-2012-6422"
      },
      {
        "db": "CNNVD",
        "id": "CNNVD-201212-232"
      }
    ]
  },
  "sources_release_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2012-12-19T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2012-7515"
      },
      {
        "date": "2012-12-19T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2012-005729"
      },
      {
        "date": "2012-12-18T00:55:04.197000",
        "db": "NVD",
        "id": "CVE-2012-6422"
      },
      {
        "date": "2012-12-18T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201212-232"
      }
    ]
  },
  "sources_update_date": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
      "data": {
        "@container": "@list"
      }
    },
    "data": [
      {
        "date": "2012-12-19T00:00:00",
        "db": "CNVD",
        "id": "CNVD-2012-7515"
      },
      {
        "date": "2012-12-25T00:00:00",
        "db": "JVNDB",
        "id": "JVNDB-2012-005729"
      },
      {
        "date": "2012-12-21T05:00:00",
        "db": "NVD",
        "id": "CVE-2012-6422"
      },
      {
        "date": "2012-12-18T00:00:00",
        "db": "CNNVD",
        "id": "CNNVD-201212-232"
      }
    ]
  },
  "threat_type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/threat_type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "remote",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201212-232"
      }
    ],
    "trust": 0.6
  },
  "title": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/title#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "Samsung GALAXY and  Meizu MX Such  Android Vulnerability to read arbitrary physical memory in device",
    "sources": [
      {
        "db": "JVNDB",
        "id": "JVNDB-2012-005729"
      }
    ],
    "trust": 0.8
  },
  "type": {
    "@context": {
      "@vocab": "https://www.variotdbs.pl/ref/type#",
      "sources": {
        "@container": "@list",
        "@context": {
          "@vocab": "https://www.variotdbs.pl/ref/sources#"
        }
      }
    },
    "data": "permissions and access control",
    "sources": [
      {
        "db": "CNNVD",
        "id": "CNNVD-201212-232"
      }
    ],
    "trust": 0.6
  }
}

cve-2012-6422

Vulnerability from cvelistv5

Published

2012-12-18 00:00

Modified

2024-09-16 19:15

Severity ?

Summary

The kernel in Samsung Galaxy S2, Galaxy Note 2, MEIZU MX, and possibly other Android devices, when running an Exynos 4210 or 4412 processor, uses weak permissions (0666) for /dev/exynos-mem, which allows attackers to read or write arbitrary physical memory and gain privileges via a crafted application, as demonstrated by ExynosAbuse.

References

▼	URL	Tags
	http://www.securityweek.com/new-vulnerability-exposed-samsungs-android-devices	x_refsource_MISC
	http://project-voodoo.org/articles/instant-fix-app-for-exynos-mem-abuse-vulnerability-no-root-required-reversible	x_refsource_MISC
	http://forum.xda-developers.com/showthread.php?p=35469999	x_refsource_MISC
	http://arstechnica.com/security/2012/12/developer-warns-of-critical-vulnerability-in-many-samsung-smartphones/	x_refsource_MISC
	http://forum.xda-developers.com/showthread.php?t=2051290	x_refsource_MISC
	http://www.sammobile.com/2012/12/16/major-vulnerability-found-on-exynos-4-devices/	x_refsource_MISC
	http://osvdb.org/88467	vdb-entry, x_refsource_OSVDB

Impacted products

Vendor

Product

Version

▼

n/a

Version: n/a

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "providerMetadata": {
          "dateUpdated": "2024-08-06T21:28:39.788Z",
          "orgId": "af854a3a-2127-422b-91ae-364da2661108",
          "shortName": "CVE"
        },
        "references": [
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.securityweek.com/new-vulnerability-exposed-samsungs-android-devices"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://project-voodoo.org/articles/instant-fix-app-for-exynos-mem-abuse-vulnerability-no-root-required-reversible"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://forum.xda-developers.com/showthread.php?p=35469999"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://arstechnica.com/security/2012/12/developer-warns-of-critical-vulnerability-in-many-samsung-smartphones/"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://forum.xda-developers.com/showthread.php?t=2051290"
          },
          {
            "tags": [
              "x_refsource_MISC",
              "x_transferred"
            ],
            "url": "http://www.sammobile.com/2012/12/16/major-vulnerability-found-on-exynos-4-devices/"
          },
          {
            "name": "88467",
            "tags": [
              "vdb-entry",
              "x_refsource_OSVDB",
              "x_transferred"
            ],
            "url": "http://osvdb.org/88467"
          }
        ],
        "title": "CVE Program Container"
      }
    ],
    "cna": {
      "affected": [
        {
          "product": "n/a",
          "vendor": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "value": "The kernel in Samsung Galaxy S2, Galaxy Note 2, MEIZU MX, and possibly other Android devices, when running an Exynos 4210 or 4412 processor, uses weak permissions (0666) for /dev/exynos-mem, which allows attackers to read or write arbitrary physical memory and gain privileges via a crafted application, as demonstrated by ExynosAbuse."
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "description": "n/a",
              "lang": "en",
              "type": "text"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2012-12-18T00:00:00Z",
        "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
        "shortName": "mitre"
      },
      "references": [
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.securityweek.com/new-vulnerability-exposed-samsungs-android-devices"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://project-voodoo.org/articles/instant-fix-app-for-exynos-mem-abuse-vulnerability-no-root-required-reversible"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://forum.xda-developers.com/showthread.php?p=35469999"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://arstechnica.com/security/2012/12/developer-warns-of-critical-vulnerability-in-many-samsung-smartphones/"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://forum.xda-developers.com/showthread.php?t=2051290"
        },
        {
          "tags": [
            "x_refsource_MISC"
          ],
          "url": "http://www.sammobile.com/2012/12/16/major-vulnerability-found-on-exynos-4-devices/"
        },
        {
          "name": "88467",
          "tags": [
            "vdb-entry",
            "x_refsource_OSVDB"
          ],
          "url": "http://osvdb.org/88467"
        }
      ],
      "x_legacyV4Record": {
        "CVE_data_meta": {
          "ASSIGNER": "cve@mitre.org",
          "ID": "CVE-2012-6422",
          "STATE": "PUBLIC"
        },
        "affects": {
          "vendor": {
            "vendor_data": [
              {
                "product": {
                  "product_data": [
                    {
                      "product_name": "n/a",
                      "version": {
                        "version_data": [
                          {
                            "version_value": "n/a"
                          }
                        ]
                      }
                    }
                  ]
                },
                "vendor_name": "n/a"
              }
            ]
          }
        },
        "data_format": "MITRE",
        "data_type": "CVE",
        "data_version": "4.0",
        "description": {
          "description_data": [
            {
              "lang": "eng",
              "value": "The kernel in Samsung Galaxy S2, Galaxy Note 2, MEIZU MX, and possibly other Android devices, when running an Exynos 4210 or 4412 processor, uses weak permissions (0666) for /dev/exynos-mem, which allows attackers to read or write arbitrary physical memory and gain privileges via a crafted application, as demonstrated by ExynosAbuse."
            }
          ]
        },
        "problemtype": {
          "problemtype_data": [
            {
              "description": [
                {
                  "lang": "eng",
                  "value": "n/a"
                }
              ]
            }
          ]
        },
        "references": {
          "reference_data": [
            {
              "name": "http://www.securityweek.com/new-vulnerability-exposed-samsungs-android-devices",
              "refsource": "MISC",
              "url": "http://www.securityweek.com/new-vulnerability-exposed-samsungs-android-devices"
            },
            {
              "name": "http://project-voodoo.org/articles/instant-fix-app-for-exynos-mem-abuse-vulnerability-no-root-required-reversible",
              "refsource": "MISC",
              "url": "http://project-voodoo.org/articles/instant-fix-app-for-exynos-mem-abuse-vulnerability-no-root-required-reversible"
            },
            {
              "name": "http://forum.xda-developers.com/showthread.php?p=35469999",
              "refsource": "MISC",
              "url": "http://forum.xda-developers.com/showthread.php?p=35469999"
            },
            {
              "name": "http://arstechnica.com/security/2012/12/developer-warns-of-critical-vulnerability-in-many-samsung-smartphones/",
              "refsource": "MISC",
              "url": "http://arstechnica.com/security/2012/12/developer-warns-of-critical-vulnerability-in-many-samsung-smartphones/"
            },
            {
              "name": "http://forum.xda-developers.com/showthread.php?t=2051290",
              "refsource": "MISC",
              "url": "http://forum.xda-developers.com/showthread.php?t=2051290"
            },
            {
              "name": "http://www.sammobile.com/2012/12/16/major-vulnerability-found-on-exynos-4-devices/",
              "refsource": "MISC",
              "url": "http://www.sammobile.com/2012/12/16/major-vulnerability-found-on-exynos-4-devices/"
            },
            {
              "name": "88467",
              "refsource": "OSVDB",
              "url": "http://osvdb.org/88467"
            }
          ]
        }
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca",
    "assignerShortName": "mitre",
    "cveId": "CVE-2012-6422",
    "datePublished": "2012-12-18T00:00:00Z",
    "dateReserved": "2012-12-17T00:00:00Z",
    "dateUpdated": "2024-09-16T19:15:58.524Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.1"
}

Vulnerability from fkie_nvd

Published

2012-12-18 00:55

Modified

2024-11-21 01:46

Severity ?

Summary

The kernel in Samsung Galaxy S2, Galaxy Note 2, MEIZU MX, and possibly other Android devices, when running an Exynos 4210 or 4412 processor, uses weak permissions (0666) for /dev/exynos-mem, which allows attackers to read or write arbitrary physical memory and gain privileges via a crafted application, as demonstrated by ExynosAbuse.

References

URL	Tags
cve@mitre.org	http://arstechnica.com/security/2012/12/developer-warns-of-critical-vulnerability-in-many-samsung-smartphones/
cve@mitre.org	http://forum.xda-developers.com/showthread.php?p=35469999	Exploit
cve@mitre.org	http://forum.xda-developers.com/showthread.php?t=2051290
cve@mitre.org	http://osvdb.org/88467
cve@mitre.org	http://project-voodoo.org/articles/instant-fix-app-for-exynos-mem-abuse-vulnerability-no-root-required-reversible
cve@mitre.org	http://www.sammobile.com/2012/12/16/major-vulnerability-found-on-exynos-4-devices/
cve@mitre.org	http://www.securityweek.com/new-vulnerability-exposed-samsungs-android-devices
af854a3a-2127-422b-91ae-364da2661108	http://arstechnica.com/security/2012/12/developer-warns-of-critical-vulnerability-in-many-samsung-smartphones/
af854a3a-2127-422b-91ae-364da2661108	http://forum.xda-developers.com/showthread.php?p=35469999	Exploit
af854a3a-2127-422b-91ae-364da2661108	http://forum.xda-developers.com/showthread.php?t=2051290
af854a3a-2127-422b-91ae-364da2661108	http://osvdb.org/88467
af854a3a-2127-422b-91ae-364da2661108	http://project-voodoo.org/articles/instant-fix-app-for-exynos-mem-abuse-vulnerability-no-root-required-reversible
af854a3a-2127-422b-91ae-364da2661108	http://www.sammobile.com/2012/12/16/major-vulnerability-found-on-exynos-4-devices/
af854a3a-2127-422b-91ae-364da2661108	http://www.securityweek.com/new-vulnerability-exposed-samsungs-android-devices

Impacted products

Vendor	Product	Version
meizu	mx	-
samsung	galaxy_note_2	-
samsung	galaxy_s2	-

JSON

To clipboard

{
  "configurations": [
    {
      "nodes": [
        {
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:h:meizu:mx:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "8EBFA2B5-7276-4C8C-A2B2-FDD69CFBD623",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:samsung:galaxy_note_2:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "C11A19CD-FAFE-45ED-A24C-72642C3ED565",
              "vulnerable": true
            },
            {
              "criteria": "cpe:2.3:h:samsung:galaxy_s2:-:*:*:*:*:*:*:*",
              "matchCriteriaId": "27B05798-6E5E-4DCD-810E-680DEB3BDE97",
              "vulnerable": true
            }
          ],
          "negate": false,
          "operator": "OR"
        }
      ]
    }
  ],
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The kernel in Samsung Galaxy S2, Galaxy Note 2, MEIZU MX, and possibly other Android devices, when running an Exynos 4210 or 4412 processor, uses weak permissions (0666) for /dev/exynos-mem, which allows attackers to read or write arbitrary physical memory and gain privileges via a crafted application, as demonstrated by ExynosAbuse."
    },
    {
      "lang": "es",
      "value": "El n\u00facleo en Samsung S2 Galaxy, Galaxy Note 2, Meizu MX, y posiblemente en otros dispositivos Android, cuando se ejecuta un procesador Exynos 4210 o 4412, utiliza permisos d\u00e9biles (0666) para /dev/exynos-mem, que permite a los atacantes leer o escribir en la memoria f\u00edsica arbitraria y obtener privilegios a trav\u00e9s de una aplicaci\u00f3n manipulada, como se demuestra por ExynosAbuse."
    }
  ],
  "id": "CVE-2012-6422",
  "lastModified": "2024-11-21T01:46:05.800",
  "metrics": {
    "cvssMetricV2": [
      {
        "acInsufInfo": false,
        "baseSeverity": "HIGH",
        "cvssData": {
          "accessComplexity": "MEDIUM",
          "accessVector": "NETWORK",
          "authentication": "NONE",
          "availabilityImpact": "COMPLETE",
          "baseScore": 9.3,
          "confidentialityImpact": "COMPLETE",
          "integrityImpact": "COMPLETE",
          "vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
          "version": "2.0"
        },
        "exploitabilityScore": 8.6,
        "impactScore": 10.0,
        "obtainAllPrivilege": false,
        "obtainOtherPrivilege": false,
        "obtainUserPrivilege": false,
        "source": "nvd@nist.gov",
        "type": "Primary",
        "userInteractionRequired": true
      }
    ]
  },
  "published": "2012-12-18T00:55:04.197",
  "references": [
    {
      "source": "cve@mitre.org",
      "url": "http://arstechnica.com/security/2012/12/developer-warns-of-critical-vulnerability-in-many-samsung-smartphones/"
    },
    {
      "source": "cve@mitre.org",
      "tags": [
        "Exploit"
      ],
      "url": "http://forum.xda-developers.com/showthread.php?p=35469999"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://forum.xda-developers.com/showthread.php?t=2051290"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://osvdb.org/88467"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://project-voodoo.org/articles/instant-fix-app-for-exynos-mem-abuse-vulnerability-no-root-required-reversible"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.sammobile.com/2012/12/16/major-vulnerability-found-on-exynos-4-devices/"
    },
    {
      "source": "cve@mitre.org",
      "url": "http://www.securityweek.com/new-vulnerability-exposed-samsungs-android-devices"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://arstechnica.com/security/2012/12/developer-warns-of-critical-vulnerability-in-many-samsung-smartphones/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "tags": [
        "Exploit"
      ],
      "url": "http://forum.xda-developers.com/showthread.php?p=35469999"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://forum.xda-developers.com/showthread.php?t=2051290"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://osvdb.org/88467"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://project-voodoo.org/articles/instant-fix-app-for-exynos-mem-abuse-vulnerability-no-root-required-reversible"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.sammobile.com/2012/12/16/major-vulnerability-found-on-exynos-4-devices/"
    },
    {
      "source": "af854a3a-2127-422b-91ae-364da2661108",
      "url": "http://www.securityweek.com/new-vulnerability-exposed-samsungs-android-devices"
    }
  ],
  "sourceIdentifier": "cve@mitre.org",
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "description": [
        {
          "lang": "en",
          "value": "CWE-264"
        }
      ],
      "source": "nvd@nist.gov",
      "type": "Primary"
    }
  ]
}

All the vulnerabilites related to meizu - mx

var-201212-0246

Vulnerability from variot

cve-2012-6422

Vulnerability from cvelistv5

Vulnerability from fkie_nvd