Samsung Mobile CVE-2015-7898

MEDIUM

Improper Access Control (CWE-284)

2017-06-27 cve@mitre.org

Denial Of Service Authentication Bypass Samsung Samsung Mobile

5.5

CVSS 3.0 · NVD

Share

Severity by source

NVD PRIMARY

5.5 MEDIUM

AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Attack Vector

Local

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Unchanged

Confidentiality

None

Integrity

None

Availability

High

Lifecycle Timeline

1

CVE Published

Jun 27, 2017 - 20:29 cve.org

MEDIUM 5.5

DescriptionCVE.org

Samsung Gallery in the Samsung Galaxy S6 allows local users to cause a denial of service (process crash).

AnalysisAI

Samsung Gallery in the Samsung Galaxy S6 allows local users to cause a denial of service (process crash). Rated medium severity (CVSS 5.5), this vulnerability is low attack complexity. Public exploit code available and no vendor patch available.

Technical ContextAI

This vulnerability is classified under CWE-284. Samsung Gallery in the Samsung Galaxy S6 allows local users to cause a denial of service (process crash). Affected products include: Samsung Samsung Mobile.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Apply vendor patches when available. Implement network segmentation and monitoring as interim mitigations.

More in Samsung Mobile

View all

CVE-2015-7896 MEDIUM This Month POC

LibQJpeg in the Samsung Galaxy S6 before the October 2015 MR allows remote attackers to cause a denial of service (memor

CVE-2015-7891 HIGH This Week POC

Race condition in the ioctl implementation in the Samsung Graphics 2D driver (aka /dev/fimg2d) in Samsung devices with A

CVE-2017-5538 CRITICAL Act Now

The kbase_dispatch function in arm/t7xx/r5p0/mali_kbase_core_linux.c in the GPU driver on Samsung devices with M(6.0) an

CVE-2016-9967 CRITICAL Act Now

Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5

CVE-2016-9966 CRITICAL Act Now

Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5

CVE-2016-9965 CRITICAL Act Now

Lack of appropriate exception handling in some receivers of the Telecom application on Samsung Note devices with L(5.0/5

CVE-2018-9143 CRITICAL Act Now

On Samsung mobile devices with M(6.0) and N(7.x) software, a heap overflow in the sensorhub binder service leads to code

CVE-2018-9139 CRITICAL Act Now

On Samsung mobile devices with N(7.x) software, a buffer overflow in the vision service allows code execution in a privi

CVE-2015-7895 MEDIUM This Month POC

Samsung Gallery on the Samsung Galaxy S6 allows local users to cause a denial of service (process crash). Rated medium s

CVE-2018-10751 MEDIUM This Month POC

A malformed OMACP WAP push message can cause memory corruption on a Samsung S7 Edge device when processing the String Ex

CVE-2018-5210 HIGH This Week

On Samsung mobile devices with N(7.x) software and Exynos chipsets, attackers can conduct a Trustlet stack overflow atta

CVE-2016-6527 HIGH This Week

The SmartCall Activity component in Telecom application on Samsung Note device L(5.0/5.1) and M(6.0) allows attackers to

Same weakness CWE-284 – Improper Access Control

View all

CVE-2012-4681 CRITICAL POC

CVE-2011-3544 CRITICAL POC

CVE-2012-1723 CRITICAL POC

CVE-2012-5076 CRITICAL POC

CVE-2014-3120 HIGH POC

CVE-2013-2423 LOW POC

CVE-2016-3427 CRITICAL

CVE-2025-12480 CRITICAL POC

Same technique Denial Of Service

View all

CVE-2015-5119 CRITICAL POC

CVE-2011-2462 CRITICAL POC

CVE-2011-0611 HIGH POC

CVE-2012-1889 HIGH POC

CVE-2012-0507 CRITICAL POC

CVE-2014-1761 HIGH POC

CVE-2015-5122 CRITICAL POC

CVE-2011-0609 HIGH POC

Share

CVE-2015-7898 vulnerability details – vuln.today

Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy