Vulnerabilities > CVE-2009-0608 - Numeric Errors vulnerability in Android SDK 1.0

047910
CVSS 7.2 - HIGH
Attack vector
LOCAL
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
COMPLETE
Integrity impact
COMPLETE
Availability impact
COMPLETE
local
low complexity
android
CWE-189

Summary

Integer overflow in the showLog function in fake_log_device.c in liblog in Open Handset Alliance Android 1.0 allows attackers to trigger a buffer overflow and possibly have unspecified other impact by sending a large number of input lines.

Vulnerable Configurations

Part Description Count
Application
Android
1

Common Weakness Enumeration (CWE)