Android privilege escalation to mediaserver from zero permissions (CVE-2014-7920 + CVE-2014-7921)

鏉庢焺鐔規病鏈夋豹灝忚彶鐨勮儲瀵岋紝娌℃湁鐜嬪叏瀹夌殑浜鴻剦锛屼絾浠栨湁騫磋交浜虹殑嫻極锛岃繖姝ｆ槸寮犻洦緇墍闇€瑕佺殑銆?

棰勫畾鐢佃瘽锛氱浜屽ぉ锛屽彲浠ユ潵鍒扮豢鑽幆緇曘€佽崏鍧尩鑼點€佺ⅶ姘寸泩鐩堛€侀鏅鐢葷殑鍐呭北鏉戔啈锛屾劅鍙楁潵鑷埂鏉戞繁澶勭殑鎮犵劧鎯剰銆?鍐呭北鏉戜綅浜庣熅灞遍晣嫻欓椊浜ょ晫鐨勫嚲鍍誨北鍖猴紝鏉戝唴鎷ユ湁鏈辯▼鏁呭眳銆佽幉鑺辨睜銆佹父姝ラ亾銆佺櫨騫存鏍戙€佺偣灝嗗彴絳夋棶娓歌祫婧愩€?

閫傛椂鏉ュ埌鍘嗙粡600浣欏勾椋庨洦鐨勬姉鍊彜鍫♀€斺€旇挷澹墍鍩庘啈锛屽涓€瀵昏窇椹販銆侀搧姊板矓銆佸煄闅嶅簷絳夊彜閬楀潃銆?鍧愬湪鍩庡涓婅璿佺櫨騫村瞾鏈堝彉榪佺殑澶ф鏍戜笅锛岀撼鍑夊敔鍡戯紝鑸掑睍韜績銆?鎴氬厜楗煎拰鑲夌嚂鐨槸榪欓噷鐨勭壒鑹插皬鍚冿紝榪旂▼鍓嶅彲涔頒簺璺笂鍚冨摝銆?

綰胯礬涓夛細璧拌媿鍗楁ˉ鑾掔嚎锛屾父灞辯帺姘存悳瀵葷綉綰㈢編椋熺嚎璺細鐜夎媿灞扁€斺€旂紿戝彜鏉戣惤鈥斺€旇帓婧€斺€旂煷姝ュご鏉戔€斺€旇繑紼?鐜夎媿灞扁€斺€旂紿戝彜鏉戣惤浣忥細鑾掓邯姘戝2鑾掓邯鈥斺€旂煷姝ュご鏉戔€斺€旇繑紼嬨€?絎竴澶╋紝鏉ュ埌鍥藉媯灄鍏洯鐜夎媿灞扁啈锛岃繖閲岃瀺灞便€佺煶銆佹邯銆佺€戙€佹箹銆佹灄銆佸搴欎負涓€浣擄紝闆勬祽騫界鍏艱€屾湁涔嬨€?

榪欓噷媯灄瑕嗙洊鐜囪揪94.28%锛屾槸鍗佸垎鐞嗘兂鐨勪紤闂層€佸吇鐢熷拰閬挎殤鑳滃湴銆?

浣犲彲浠ユ部鐫€鎽╁ぉ宀櫥涓婄帀鑻嶇粷欏訛紝瑙傛棩鍑恒€佽祻浜戞搗銆佽濂囩煶銆?鍦ㄨ繖鏍風瓑綰у垝鍒嗘．涓ョ殑鍥藉閲岋紝濂蟲€ф湰韜湴浣嶄綆涓嬶紝鍙兂鑰岀煡濠氬Щ鍒跺害蹇呭畾浼氬嶮鍒嗕弗鑻涘苟涓斾笉鍙嬪ソ銆?

鍗充嬌韜負鍗板害鐨勯《嫻佸コ鏄燂紝涔熼毦浠ラ伩鍏嶉伃鍙椾笉鍏鐨勫寰咃紝鍜屽濮諱笂鐨勪笉騫崇瓑銆?1973騫?1鏈?鏃ュ嚭鐢熶簬鍗板害鍗＄撼濉斿厠閭︽浖鏍兼礇灝旂殑鑹捐タ鐡﹀▍路闆鳳紝鏄嵃搴︽渶鐭ュ悕鐨勫コ婕斿憳锛屽牚縐版槸瀹濊幈鍧炴渶鐐欐墜鍙儹鐨勯《嫻併€?

鑹捐タ鐡﹀▍路闆風殑瀹跺涵鏄睘浜庡嵃搴﹀瘜瑁曚笖浼犵粺鐨勪腑浜ч樁綰э紝浠庡皬鏃犲咖鏃犺檻鐨勮壘瑗跨摝濞呭涔犳垚緇╀紭縐€锛屼箹宸ф噦浜嬶紝鍔犱笂鍑轟紬鐨勫璨岋紝鍙互璿存棤鍙寫鍓斻€?鑹捐タ鐡﹀▍澶у瀛︿範鐨勪笓涓氫篃鍗佸垎涓庝紬涓嶅悓锛屽ス絝嬪織鍋氫竴鍚嶅緩絳戝笀锛屽洜姝ゅぇ瀛︽姤鑰冪殑鏄緩絳戜笓涓氥€?