Vulnerability Details : CVE-2015-4034
The createFromParcel method in the com.absolute.android.persistence.MethodSpec class in Samsung Galaxy S5s allows remote attackers to execute arbitrary files via a crafted Parcelable object in a serialized MethodSpec object.
Vulnerability category: BypassGain privilege
Exploit prediction scoring system (EPSS) score for CVE-2015-4034
Probability of exploitation activity in the next 30 days: 34.01%
Percentile, the proportion of vulnerabilities that are scored at or less: ~ 97 % EPSS Score History EPSS FAQ
CVSS scores for CVE-2015-4034
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source |
|---|---|---|---|---|---|
|
7.9
|
HIGH | AV:A/AC:M/Au:N/C:C/I:C/A:C |
5.5
|
10.0
|
NIST |
CWE ids for CVE-2015-4034
-
The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.Assigned by: nvd@nist.gov (Primary)
References for CVE-2015-4034
-
http://www.zerodayinitiative.com/advisories/ZDI-15-256/
ZDI-15-256 | Zero Day Initiative
-
http://www.securityfocus.com/bid/75403
Samsung Galaxy S5 CVE-2015-4034 Remote Code Execution Vulnerability
Products affected by CVE-2015-4034
- cpe:2.3:h:samsung:galaxy_s5:-:*:*:*:*:*:*:*