Lucene search

Google_androidCVE-2016-8460

HistoryJan 12, 2017 - 8:59 p.m.

CVE-2016-8460

2017-01-1220:59:01

CWE-200

google_android

web.nvd.nist.gov

information security

nvidia

video driver

cve-2016-8460

android

kernel-3.10

nvd

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

AI Score

5.2

Confidence

High

EPSS

0.001

Percentile

30.2%

JSON

An information disclosure vulnerability in the NVIDIA video driver could enable a local malicious application to access data outside of its permission levels. This issue is rated as High because it could be used to access sensitive data without explicit user permission. Product: Android. Versions: Kernel-3.10. Android ID: A-31668540. References: N-CVE-2016-8460.

Affected configurations

Nvd

Vulners

Node

linuxlinux_kernelMatch3.10

VendorProductVersionCPE
linuxlinux_kernel3.10cpe:2.3:o:linux:linux_kernel:3.10:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
linux	linux_kernel	3.10	cpe:2.3:o:linux:linux_kernel:3.10:::::::*

CNA Affected

[
  {
    "product": "Android",
    "vendor": "Google Inc.",
    "versions": [
      {
        "status": "affected",
        "version": "Kernel-3.10"
      }
    ]
  }
]

References

www.securityfocus.com/bid/95249

source.android.com/security/bulletin/2017-01-01.html

CVSS2

4.3

Attack Vector

NETWORK

Attack Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

CVSS3

5.5

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

NONE

Availability Impact

NONE

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

AI Score

5.2

Confidence

High

EPSS

0.001

Percentile

30.2%

JSON

Related for CVE-2016-8460