CVE-2014-7954

Directory traversal vulnerability in the doSendObjectInfo method in frameworks/av/media/mtp/MtpServer.cpp in Android 4.4.4 allows physically proximate…

published July 7, 2017

CVSS
—
EPSS
0%
Percentile
30.8
In the wild
Unconfirmed
What it is

Directory traversal vulnerability in the doSendObjectInfo method in frameworks/av/media/mtp/MtpServer.cpp in Android 4.4.4 allows physically proximate attackers with a direct connection to the target Android device to upload files outside of the sdcard via a .. (dot dot) in a name parameter of an MTP request.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00382 · 30.8th percentile
Published
2017-07-07T17:00Z
EPSS history
Timeline
  • 07 JUL 17:00Z
    Directory traversal vulnerability in the doSendObjectInfo method in frameworks/av/media/mtp/MtpServer.cpp in Android 4.4.4 allows physically proximate…
    cvelistv5