CVE-2009-2656
Quick assessment
Affected
n/a n/a
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Android是Google于07年11月5日发布的基于Linux核心的开源手机软件平台，该平台由操作系统、中间件、用户界面和应用软件组成，号称是首个为移动终端打造的真正开放和完整的移动软件。 Android 平台的com.android.phone进程中存在未明漏洞。远程攻击可以借助一个特制的SMS信息，导致服务拒绝(网络断开)。在Black Hat USA 2009的Collin Mulliner和Charlie Miller中已经被验证。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2009-2656
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
Unspecified vulnerability in the com.android.phone process in Android 1.0, 1.1, and 1.5 allows remote attackers to cause a denial of service (network disconnection) via a crafted SMS message, as demonstrated by Collin Mulliner and Charlie Miller at Black Hat USA 2009.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Android SMS远程拒绝服务漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Android是Google于07年11月5日发布的基于Linux核心的开源手机软件平台，该平台由操作系统、中间件、用户界面和应用软件组成，号称是首个为移动终端打造的真正开放和完整的移动软件。 Android 平台的com.android.phone进程中存在未明漏洞。远程攻击可以借助一个特制的SMS信息，导致服务拒绝(网络断开)。在Black Hat USA 2009的Collin Mulliner和Charlie Miller中已经被验证。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | n/a | n/a | - |
|
II. Public POCs for CVE-2009-2656
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2009-2656
请登录查看更多情报信息。
Vendor Advisories for CVE-2009-2656 (2)
Other References for CVE-2009-2656 (1)
Same Patch Batch · n/a · 2009-08-03 · 18 CVEs total
| CVE-2008-6888 | Preprojects Pre Classified Listings 'signup.asp'跨站脚本攻击漏洞 | |
| CVE-2009-2655 | Microsoft Internet Explorer "mshtml.dll" 拒绝服务攻击漏洞 | |
| CVE-2009-2654 | Mozilla Firefox出错页面地址栏URI欺骗漏洞 | |
| CVE-2009-2653 | Microsoft Windows Server 2003 权限许可和访问控制问题漏洞 | |
| CVE-2009-2652 | Sun Solaris 可信赖的扩展名标识的信息包远程拒绝服务漏洞 | |
| CVE-2009-2404 | Mozilla NSS库证书正则表达式解析堆溢出漏洞 | |
| CVE-2008-6891 | Codetoad ASP Forum Script 多个跨站脚本攻击漏洞 | |
| CVE-2008-6890 | Codetoad ASP Forum Script 'messages.asp'SQL注入漏洞 | |
| CVE-2008-6889 | Activewebsoftwares ASPReferral 'Merchantsadd.asp' SQL注入漏洞 | |
| CVE-2008-6892 | Peel 脚本lire/index.php SQL注入漏洞 | |
| CVE-2008-6887 | Preprojects Pre Classified Listings 'detailad.asp' SQL注入漏洞 | |
| CVE-2008-6886 | RSA enVision 平台Web控制台口令哈希泄露漏洞 | |
| CVE-2009-2204 | Apple iPhone短信消息远程内存破坏漏洞 | |
| CVE-2008-6896 | 3cx phone_system 'login.php' 信息泄露漏洞 | |
| CVE-2008-6895 | 3cx phone system 未明漏洞 | |
| CVE-2008-6894 | 3CX Phone System 多个跨站脚本攻击漏洞 | |
| CVE-2008-6893 | Alt-N MDaemon WorldClient 跨站脚本攻击漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2009-2656
No comments yet