CVE-2017-17551

The Backup and Restore feature in Mobotap Dolphin Browser for Android 12.0.2 suffers from an arbitrary file write vulnerability when attempting to restore browser settings from a malicious Dolphin Browser backup file. This arbitrary file write vulnerability allows an attacker to overwrite a specific executable in the Dolphin Browser's data directory with a crafted malicious executable. Every time the Dolphin Browser is launched, it will attempt to run the malicious executable from disk, thus executing the attacker's code.

• CWE-20

• https://github.com/VerSprite/research/blob/master/advisories/VS-2017-001.mdIssue Tracking, Third Party Advisory
• https://github.com/VerSprite/research/blob/master/advisories/VS-2017-001.mdIssue Tracking, Third Party Advisory

Published

Dec 11, 2017

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2017-17546Rejected reason: Not used
• CVE-2017-17547Rejected reason: Not used
• CVE-2017-17548Rejected reason: Not used
• CVE-2017-17549Citrix NetScaler Application Delivery Controller (ADC) and N…
• CVE-2017-1755IBM Security Identity Governance Virtual Appliance 5.2 throu…6.5
• CVE-2017-17550ZyXEL ZyWALL USG 2.12 AQQ.2 and 3.30 AQQ.7 devices are affec…
• CVE-2017-17552/LoadFrame in Zoho ManageEngine AD Manager Plus build 6590 -…8.8
• CVE-2017-17553The Dolphin Browser for Android 12.0.2 suffers from an insec…
• CVE-2017-17554A NULL pointer dereference (DoS) Vulnerability was found in …
• CVE-2017-17555The swri_audio_convert function in audioconvert.c in FFmpeg …
• CVE-2017-17556A debug tool in Synaptics TouchPad drivers allows local user…
• CVE-2017-17557In Foxit Reader before 9.1 and Foxit PhantomPDF before 9.1, …