CVEvulnerability
CVE-2014-7952
7.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2018-01-12
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.8 HIGH — CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 4.6 MEDIUM — AV:L/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-74
Description
The backup mechanism in the adb tool in Android might allow attackers to inject additional applications (APKs) and execute arbitrary code by leveraging failure to filter application data streams.
Affected configurations
• google android
Related
Weakness · CWE (1)
- CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component weakness
References
- http://packetstormsecurity.com/files/132645/ADB-Backup-APK-Injection.html Exploit, Third Party Advisory, VDB Entry
- http://seclists.org/fulldisclosure/2015/Jul/46 Exploit, Mailing List, Third Party Advisory
- http://www.search-lab.hu/about-us/news/110-android-adb-backup-apk-injection-vulnerability Exploit, Third Party Advisory
- http://www.securityfocus.com/archive/1/535980/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/75705 Third Party Advisory, VDB Entry
- https://github.com/irsl/ADB-Backup-APK-Injection/ Exploit, Third Party Advisory
- http://packetstormsecurity.com/files/132645/ADB-Backup-APK-Injection.html Exploit, Third Party Advisory, VDB Entry
- http://seclists.org/fulldisclosure/2015/Jul/46 Exploit, Mailing List, Third Party Advisory
- http://www.search-lab.hu/about-us/news/110-android-adb-backup-apk-injection-vulnerability Exploit, Third Party Advisory
- http://www.securityfocus.com/archive/1/535980/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/bid/75705 Third Party Advisory, VDB Entry
- https://github.com/irsl/ADB-Backup-APK-Injection/ Exploit, Third Party Advisory