CVE-2014-7951

Related Files

ADB Backup Traversal / File Overwrite

Posted Apr 19, 2015

Authored by Imre Rad

ADB backup on Android version 4.0.4 allows for file overwrite via modified tar headers.

tags | exploit, file inclusion

advisories | CVE-2014-7951

SHA-256 | 05f57d5729d25c00164ccfa74bfb76fe4328bb79a10efd4cf3e895cd21b26843

Download | Favorite | View

Android Backup Agent Arbitrary Code Execution

Posted Apr 19, 2015

Authored by Imre Rad

The Android backup agent implementation was vulnerable to privilege escalation and race condition. An attacker with adb shell access could run arbitrary code as the system (1000) user (or any other valid package). The attack is tested on Android OS 4.4.4.

tags | exploit, arbitrary, shell

advisories | CVE-2014-7951

SHA-256 | 179057ea228364a9ce3f89ec74a1a1873d65e8c8b3dd447dccc0af6935bf1a87

Download | Favorite | View