Trend Micro Security

Android Mediaserver Vulnerability (CVE-2015-3842)

  危険度: : 緊急
  CVE識別番号: CVE-2015-3842
  情報公開日: 8 17, 2015

  概要

This vulnerability assigned with CVE-2015-3842, affects the�AudioEffect�component found in the�mediaserver�program. Attackers can run arbitrary code on the device when successfully exploited thus compromising its security. However, attackers need to convince users first to install a malicious app that doesn't require any permission.

The said vulnerability affects Android versions 2.3 to 5.1.1.