Vulnerabilities > CVE-2012-4220 - Unspecified vulnerability in Google Android

CVSS 6.8 - MEDIUM

Attack vector

NETWORK

Attack complexity

MEDIUM

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

PARTIAL

network

google

NVD

Published: 2012-11-30

Updated: 2013-10-10

Summary

diagchar_core.c in the Qualcomm Innovation Center (QuIC) Diagnostics (aka DIAG) kernel-mode driver for Android 2.3 through 4.2 allows attackers to execute arbitrary code or cause a denial of service (incorrect pointer dereference) via an application that uses crafted arguments in a local diagchar_ioctl call.

Vulnerable Configurations

Part	Description	Count
OS	Google Google Android 2.3 Google Android 2.3.1 Google Android 2.3.2 Google Android 2.3.3 Google Android 2.3.4 Google Android 2.3.5 Google Android 2.3.6 Google Android 2.3.7 Google Android 3.0 Google Android 3.1 Google Android 3.2 Google Android 3.2.1 Google Android 3.2.2 Google Android 3.2.4 Google Android 3.2.6 Google Android 4.0 Google Android 4.0.1 Google Android 4.0.2 Google Android 4.0.3 Google Android 4.0.4 Google Android 4.1 Google Android 4.2	23

The Hacker News

id	THN:C8A4219AFC2880AC311776A8C10BAE97
last seen	2018-01-27
modified	2017-11-28
published	2017-11-27
reporter	Mohit Kumar
source	https://thehackernews.com/2017/11/android-spying-app.html
title	Google Detects Android Spyware That Spies On WhatsApp, Skype Calls

Summary

Vulnerable Configurations

The Hacker News

References