CVE-2016-8406 - CVE Vulnerability

An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-31796940. (CVSS:4.3) (Last Update:2017-01-12)

Vulnerability Details : An information disclosure vulnerability in kernel components including the ION subsystem, Binder, USB driver and networking subsystem could enable a local malicious application to access data outside of its permission levels. This issue is rated as Moderate because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10, Kernel-3.18. Android ID: A-31796940. Publish Date : 2017-01-12 Last Update Date : 2017-01-12 - CVSS Scores & Vulnerability Types CVSS Score 4.3 Confidentiality Impact Partial(There is considerable informational disclosure.) Integrity Impact None(There is no impact to the integrity of the system) Availability Impact None(There is no impact to the availability of the system.) Access Complexity Medium(The access conditions are somewhat specialized. Some preconditions must be satistified to exploit) Authentication Not required(Authentication is not required to exploit the vulnerability.) Gained Access None Vulnerability Type(s) Obtain Information CWE ID 200 - Products Affected By CVE-2016-8406 # Product Type Vendor Product Version Update Edition Language No vulnerable product found. If the vulnerability is created recently it may take a few days to gather vulnerable products list and other information like cvss scores. Please check again in a few days. - References For CVE-2016-8406 https://source.android.com/security/bulletin/2016-12-01.html CONFIRM

- Metasploit Modules Related To CVE-2016-8406 There are not any metasploit modules related to this CVE entry (Please visit www.metasploit.com for more information)