CVE-2012-4221
30.11.2012, 12:54
Integer overflow in diagchar_core.c in the Qualcomm Innovation Center (QuIC) Diagnostics (aka DIAG) kernel-mode driver for Android 2.3 through 4.2 allows attackers to execute arbitrary code or cause a denial of service via an application that uses crafted arguments in a local diagchar_ioctl call.Enginsight
| Vendor | Product | Version |
|---|---|---|
| android | 2.3 | |
| android | 2.3:rev1 | |
| android | 2.3.1 | |
| android | 2.3.2 | |
| android | 2.3.3 | |
| android | 2.3.4 | |
| android | 2.3.5 | |
| android | 2.3.6 | |
| android | 2.3.7 | |
| android | 3.0 | |
| android | 3.1 | |
| android | 3.2 | |
| android | 3.2.1 | |
| android | 3.2.2 | |
| android | 3.2.4 | |
| android | 3.2.6 | |
| android | 4.0 | |
| android | 4.0.1 | |
| android | 4.0.2 | |
| android | 4.0.3 | |
| android | 4.0.4 | |
| android | 4.1 | |
| android | 4.2 |
𝑥
= Vulnerable software versions
Debian Releases
Ubuntu Releases
Ubuntu Product | |||||||||||
|---|---|---|---|---|---|---|---|---|---|---|---|
| linux |
| ||||||||||
| linux-armadaxp |
| ||||||||||
| linux-ec2 |
| ||||||||||
| linux-fsl-imx51 |
| ||||||||||
| linux-linaro-omap |
| ||||||||||
| linux-linaro-shared |
| ||||||||||
| linux-linaro-vexpress |
| ||||||||||
| linux-lts-backport-maverick |
| ||||||||||
| linux-lts-backport-oneiric |
| ||||||||||
| linux-lts-quantal |
| ||||||||||
| linux-mvl-dove |
| ||||||||||
| linux-qcm-msm |
| ||||||||||
| linux-ti-omap4 |
|
Common Weakness Enumeration
References