CVE-2016-6703

{"id": "CVE-2016-6703", "cveTags": [], "metrics": {"cvssMetricV2": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"version": "2.0", "baseScore": 6.8, "accessVector": "NETWORK", "vectorString": "AV:N/AC:M/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "MEDIUM", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "acInsufInfo": false, "impactScore": 6.4, "baseSeverity": "MEDIUM", "obtainAllPrivilege": false, "exploitabilityScore": 8.6, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}], "cvssMetricV30": [{"type": "Primary", "source": "nvd@nist.gov", "cvssData": {"scope": "UNCHANGED", "version": "3.0", "baseScore": 7.8, "attackVector": "LOCAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "REQUIRED", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "HIGH"}, "impactScore": 5.9, "exploitabilityScore": 1.8}]}, "published": "2016-11-25T16:59:09.187", "references": [{"url": "http://www.securityfocus.com/bid/94161", "tags": ["Third Party Advisory", "VDB Entry"], "source": "security@android.com"}, {"url": "https://source.android.com/security/bulletin/2016-11-01.html", "tags": ["Vendor Advisory"], "source": "security@android.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Primary", "source": "nvd@nist.gov", "description": [{"lang": "en", "value": "CWE-284"}]}], "descriptions": [{"lang": "en", "value": "A remote code execution vulnerability in an Android runtime library in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, and 6.x before 2016-11-01 could enable an attacker using a specially crafted payload to execute arbitrary code in the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses the Android runtime. Android ID: A-30765246."}, {"lang": "es", "value": "Una vulnerabilidad de ejecuci\u00f3n de c\u00f3digo remoto en la biblioteca Android runtime en Android 4.x en versiones anteriores a 4.4.4, 5.0.x en versiones anteriores a 5.0.2, 5.1.x en versiones anteriores a 5.1.1 y 6.x en versiones anteriores a 01-11-2016 podr\u00eda habilitar a un atacante que utiliza una carga \u00fatil especialmente manipulada a ejecutar c\u00f3digo arbitrario en el contexto de un proceso no privilegiado. Este problema est\u00e1 clasificado como High debido a la posibilidad de ejecuci\u00f3n remota de c\u00f3digo en una aplicaci\u00f3n que usa el Android runtime. Android ID: A-30765246."}], "lastModified": "2016-12-06T15:09:33.200", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:o:google:android:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "2567A6D5-BBA1-47B2-B1C3-EFABE9408FA9", "versionEndIncluding": "6.0.1"}, {"criteria": "cpe:2.3:o:google:android:4.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A39C31E3-75C0-4E92-A6B5-7D67B22E3449"}, {"criteria": "cpe:2.3:o:google:android:4.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "BB318EA4-2908-4B91-8DBB-20008FDF528A"}, {"criteria": "cpe:2.3:o:google:android:4.0.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1F4E46A9-B652-47CE-92E8-01021E57724B"}, {"criteria": "cpe:2.3:o:google:android:4.0.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "AB9B53C6-AE84-4A45-B83E-8E5CE44F7B93"}, {"criteria": "cpe:2.3:o:google:android:4.0.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "36DD8E3F-6308-4680-B932-4CBD8E58A7FB"}, {"criteria": "cpe:2.3:o:google:android:4.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "1DA9F0F7-D592-481E-884C-B1A94E702825"}, {"criteria": "cpe:2.3:o:google:android:4.1.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "6CD857E7-B878-49F9-BDDA-93DDEBB0B42B"}, {"criteria": "cpe:2.3:o:google:android:4.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FBDABB6C-FFF9-4E79-9EF1-BDC0BBDEA9F1"}, {"criteria": "cpe:2.3:o:google:android:4.2.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A47AB858-36DE-4330-8CAC-1B46C5C8DA80"}, {"criteria": "cpe:2.3:o:google:android:4.2.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "49413FF7-7910-4F74-B106-C3170612CB2A"}, {"criteria": "cpe:2.3:o:google:android:4.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A2467F65-A3B7-4E45-A9A5-E5A6EFD99D7B"}, {"criteria": "cpe:2.3:o:google:android:4.3.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "A8882E50-7C49-4A99-91F2-DF979CF8BB2F"}, {"criteria": "cpe:2.3:o:google:android:4.4:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "98C32982-095C-4628-9958-118A3D3A9CAA"}, {"criteria": "cpe:2.3:o:google:android:4.4.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "8FC0FCEA-0B3D-43C1-AB62-4F9C880B4CA1"}, {"criteria": "cpe:2.3:o:google:android:4.4.2:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "EC75ED04-B8C7-4CC0-AC64-AE2D9E0CDF5D"}, {"criteria": "cpe:2.3:o:google:android:4.4.3:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "FC13D3EE-CC89-4883-8E3D-3FE25FB8CF42"}, {"criteria": "cpe:2.3:o:google:android:5.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "7C4E6353-B77A-464F-B7DE-932704003B33"}, {"criteria": "cpe:2.3:o:google:android:5.0.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "77125688-2CCA-4990-ABB2-551D47CB0CDD"}, {"criteria": "cpe:2.3:o:google:android:5.1:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E7A8EC00-266C-409B-AD43-18E8DFCD6FE3"}, {"criteria": "cpe:2.3:o:google:android:5.1.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "B846C63A-7261-481E-B4A4-0D8C79E0D8A7"}, {"criteria": "cpe:2.3:o:google:android:6.0:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "E70C6D8D-C9C3-4D92-8DFC-71F59E068295"}], "operator": "OR"}]}], "sourceIdentifier": "security@android.com"}