CVE-2015-7895 : Samsung Gallery on the Samsung Galaxy S6 allows local users to cause a denial of

Samsung Gallery on the Samsung Galaxy S6 allows local users to cause a denial of service (process crash).

Published 2017-06-27 20:29:01

Updated 2017-07-03 17:45:01

Source MITRE

View at NVD, CVE.org

Vulnerability category: BypassGain privilegeDenial of service

Products affected by CVE-2015-7895

Samsung » Samsung Mobile
cpe:2.3:o:samsung:samsung_mobile:*:*:*:*:*:*:*:*
Matching versions
When used together with: Samsung » Galaxy S6 » Version: N/A

EPSS FAQ

0.07%

Probability of exploitation activity in the next 30 days EPSS Score History

~ 31 %

Percentile, the proportion of vulnerabilities that are scored at or less

Base Score	Base Severity	CVSS Vector	Exploitability Score	Impact Score	Score Source
2.1	LOW	AV:L/AC:L/Au:N/C:N/I:N/A:P	3.9	2.9	NIST
Access Vector: Local Access Complexity: Low Authentication: None Confidentiality Impact: None Integrity Impact: None Availability Impact: Partial
5.5	MEDIUM	CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H	1.8	3.6	NIST
Attack Vector: Local Attack Complexity: Low Privileges Required: Low User Interaction: None Scope: Unchanged Confidentiality: None Integrity: None Availability: High

CWE-284 Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

Assigned by: nvd@nist.gov (Primary)

https://www.exploit-db.com/exploits/38613/

Samsung Galaxy S6 Samsung Gallery - Bitmap Decoding Crash
Exploit;Third Party Advisory;VDB Entry
http://www.securityfocus.com/bid/77429

Samsung Galaxy S6 CVE-2015-7895 Denial of Service Vulnerability
Third Party Advisory;VDB Entry
https://googleprojectzero.blogspot.ie/2015/11/hack-galaxy-hunting-bugs-in-samsung.html

Project Zero: Hack The Galaxy: Hunting Bugs in the Samsung Galaxy S6 Edge
Third Party Advisory

CVEs referencing this url
https://bugs.chromium.org/p/project-zero/issues/detail?id=497&redir=1

497 - Samsung Galaxy S6: Samsung Gallery Bitmap Decoding Crash - project-zero - Monorail
Issue Tracking;Third Party Advisory
http://packetstormsecurity.com/files/134950/Samsung-Galaxy-S6-Samsung-Gallery-Bitmap-Decoding-Crash.html

Samsung Galaxy S6 Samsung Gallery Bitmap Decoding Crash ≈ Packet Storm
Third Party Advisory;VDB Entry

Jump to