CVE-2011-1149
published 2011-04-21CVE-2011-1149: Android before 2.3 does not properly restrict access to the system property space, which allows local applications to bypass the application sandbox and gain…
PriorityP427high7.2CVSS 2.0
AVLACLAuNCCICAC
EPSS
0.32%
24.2th percentile
Android before 2.3 does not properly restrict access to the system property space, which allows local applications to bypass the application sandbox and gain privileges, as demonstrated by psneuter and KillingInTheNameOf, related to the use of Android shared memory (ashmem) and ASHMEM_SET_PROT_MASK.
Affected
6 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| android | <= 2.2.2 | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — | |
| android | — | — |
CVSS provenance
nvdv2.07.2HIGHAV:L/AC:L/Au:N/C:C/I:C/A:C
osv7.2HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-jmgq-4v25-c6xw: Android before 2
ghsa_unreviewed·2022-05-17
CVE-2011-1149 [HIGH] GHSA-jmgq-4v25-c6xw: Android before 2
Android before 2.3 does not properly restrict access to the system property space, which allows local applications to bypass the application sandbox and gain privileges, as demonstrated by psneuter and KillingInTheNameOf, related to the use of Android shared memory (ashmem) and ASHMEM_SET_PROT_MASK.
OSV
CVE-2011-1149: Android before 2
osv·2011-04-21·CVSS 7.2
CVE-2011-1149 [HIGH] CVE-2011-1149: Android before 2
Android before 2.3 does not properly restrict access to the system property space, which allows local applications to bypass the application sandbox and gain privileges, as demonstrated by psneuter and KillingInTheNameOf, related to the use of Android shared memory (ashmem) and ASHMEM_SET_PROT_MASK.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
http://android.git.kernel.org/?p=kernel/common.git%3Ba=commit%3Bh=c98a285075f26e2b17a5baa2cb3eb6356a75597ehttp://android.git.kernel.org/?p=platform/system/core.git%3Ba=commit%3Bh=25b15be9120bcdaa0aba622c67ad2c835d9e91cahttp://c-skills.blogspot.com/2011/01/adb-trickery-again.htmlhttp://forum.xda-developers.com/wiki/index.php?title=HTC_Vision#Rooting_the_G2http://groups.google.com/group/android-security-discuss/browse_thread/thread/15f97658c88d6827/e86db04652651971?show_docid=e86db04652651971https://github.com/tmzt/g2root-kmod/tree/scotty2/scotty2http://android.git.kernel.org/?p=kernel/common.git%3Ba=commit%3Bh=c98a285075f26e2b17a5baa2cb3eb6356a75597ehttp://android.git.kernel.org/?p=platform/system/core.git%3Ba=commit%3Bh=25b15be9120bcdaa0aba622c67ad2c835d9e91cahttp://c-skills.blogspot.com/2011/01/adb-trickery-again.htmlhttp://forum.xda-developers.com/wiki/index.php?title=HTC_Vision#Rooting_the_G2http://groups.google.com/group/android-security-discuss/browse_thread/thread/15f97658c88d6827/e86db04652651971?show_docid=e86db04652651971https://github.com/tmzt/g2root-kmod/tree/scotty2/scotty2
2011-04-21
Published