Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Android 1.6 Donut through 4.2 Jelly Bean does not properly check cryptographic signatures for applications, which allows attackers to execute arbitrary code via an application package file (APK) that is modified in a way that does not violate the cryptographic signature, probably involving multiple entries in a Zip file with the same name in which one entry is validated but the other entry is installed, aka Android security bug 8219321 and the "Master Key" vulnerability.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Android Donut/Jelly Bean APK 任意代码执行漏洞
Vulnerability Description
Google Chrome是美国谷歌(Google)公司开发的一款Web浏览器。Android是美国谷歌(Google)公司和开放手持设备联盟(简称OHA)共同开发的一套以Linux为基础的开源操作系统。 Android 1.6 Donut至4.2 Jelly Bean版本中存在漏洞,该漏洞源于程序没有正确对应用程序检查加密签名。攻击者可通过修改的方式不违反加密签名的应用程序数据包文件(APK),利用该漏洞执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A