Android 1.5 CRBxx allows local users to bypass the (1) Manifest.permission.CAMERA (aka android.permission.CAMERA) and (2) Manifest.permission.AUDIO_RECORD (aka android.permission.RECORD_AUDIO) configuration settings by installing and executing an application that does not make a permission request before using the camera or microphone.
References
Configurations
History
07 Nov 2023, 02:04
Type | Values Removed | Values Added |
---|---|---|
References |
|
|
Information
Published : 2009-07-17 16:30
Updated : 2023-12-10 10:51
NVD link : CVE-2009-2348
Mitre link : CVE-2009-2348
CVE.ORG link : CVE-2009-2348
JSON object : View
Products Affected
- android
CWE
CWE-94
Improper Control of Generation of Code ('Code Injection')