CVE-2017-0478 PoC — Android Framesequence库安全漏洞

Source

https://github.com/bingghost/CVE-2017-0478

Associated Vulnerability

Title: Android Framesequence库安全漏洞 (CVE-2017-0478)
Description:A remote code execution vulnerability in the Framesequence library could enable an attacker using a specially crafted file to execute arbitrary code in the context of an unprivileged process. This issue is rated as High due to the possibility of remote code execution in an application that uses the Framesequence library. Product: Android. Versions: 5.0.2, 5.1.1, 6.0, 6.0.1, 7.0, 7.1.1. Android ID: A-33718716.

Description

poc of CVE-2017-0478

Readme

# CVE-2017-0478
poc of CVE-2017-0478

The file of FrameSequence_webp.cpp is not compiled  in AOSP currently,  so when you compile libframesequence.so  with webp, 
you need compile with FRAMESEQUENCE_INCLUDE_WEBP(like this:  FRAMESEQUENCE_INCLUDE_WEBP=true mm -B)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →