CVE-2017-0382
Last modified
CVE-2017-0382 is a vulnerability of currently unknown severity. A remote code execution vulnerability in the Framesequence library could enable an attacker using a specially crafted file to execute arbitrary code in the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses the Framesequence library. EPSS estimates a 0.94% chance of exploitation in the next 30 days.
Description
A remote code execution vulnerability in the Framesequence library could enable an attacker using a specially crafted file to execute arbitrary code in the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses the Framesequence library. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1. Android ID: A-32338390.
Metrics
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Android | 5.0 | |
| Android | 5.0.1 | |
| Android | 5.0.2 | |
| Android | 5.1 | |
| Android | 5.1.0 | |
| Android | 5.1.1 | |
| Android | 6.0 | |
| Android | 6.0.1 | |
| Android | 7.0 | |
| Android | 7.1.0 |
References
- http://www.securityfocus.com/bid/95247Third Party Advisory, VDB Entry
- https://source.android.com/security/bulletin/2017-01-01.htmlVendor Advisory
- http://www.securityfocus.com/bid/95247Third Party Advisory, VDB Entry
- https://source.android.com/security/bulletin/2017-01-01.htmlVendor Advisory
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2017-0382?
How severe is CVE-2017-0382?
How do I fix CVE-2017-0382?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2017
- CVE-2017-0376The hidden-service feature in Tor before 0.3.0.8 allows a de…
- CVE-2017-0377Tor 0.3.x before 0.3.0.9 has a guard-selection algorithm tha…
- CVE-2017-0378XSS exists in the login_form function in views/helpers.php i…
- CVE-2017-0379Libgcrypt before 1.8.1 does not properly consider Curve25519…
- CVE-2017-0380The rend_service_intro_established function in or/rendservic…
- CVE-2017-0381An information disclosure vulnerability in silk/NLSF_stabili…
- CVE-2017-0383An elevation of privilege vulnerability in the Framework API…
- CVE-2017-0384An elevation of privilege vulnerability in lvm/wrapper/Bundl…
- CVE-2017-0385An elevation of privilege vulnerability in Audioserver could…
- CVE-2017-0386An elevation of privilege vulnerability in the libnl library…
- CVE-2017-0387An elevation of privilege vulnerability in Mediaserver could…
- CVE-2017-0388An elevation of privilege vulnerability in the External Stor…
Are you affected by CVE-2017-0382?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST