|CVSS SCORE||4.4, (AV:L/AC:M/Au:N/C:P/I:P/A:P)|
|TREND MICRO CUSTOMER PROTECTION||Trend Micro TippingPoint IPS customers are protected against this vulnerability by Digital Vaccine protection filter ID 31145. For further product information on the TippingPoint IPS: http://www.tippingpoint.com|
The specific flaw exists within the handling of push messages. The issue lies in the ability to start an activity with controlled arguments. An attacker can leverage this vulnerability to escalate privileges to resources normally protected from the application.
|CREDIT||Tencent Keen Security Lab