← Back

CVE-2011-1149

nvd nist
Published: Apr 21, 2011Modified: Apr 29, 2026

JSON object

Loading...
7.2
Vector
AV:L/AC:L/Au:N/C:C/I:C/A:C
Exploitability: 3.9 / Impact: 10.0
Source: NVD

Description

Android before 2.3 does not properly restrict access to the system property space, which allows local applications to bypass the application sandbox and gain privileges, as demonstrated by psneuter and KillingInTheNameOf, related to the use of Android shared memory (ashmem) and ASHMEM_SET_PROT_MASK.

Affected (6)

Products: Google: Android
1 product
Android
Configuration A
6 vulnerable
Vulnerable SoftwareAffected Versions
Google
Up to 2.2.2
Version 1.5
Version 1.6
Version 2.1
Version 2.2.1
Version 2.2 rev1

Related CWEs

References (12)

Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Patch

Timeline

No history available yet.