0day.today - Biggest Exploit Database in the World.
- We use one main domain: http://0day.today
- Most of the materials is completely FREE
- If you want to purchase the exploit / get V.I.P. access or pay for any other service,
you need to buy or earn
GOLD
Administration of this site uses the official contacts. Beware of impostors!
We DO NOT use Telegram or any messengers / social networks!Please, beware of scammers!
- Read the [ agreement ]
- Read the [ Submit ] rules
- Visit the [ faq ] page
- [ Register ] profile
- Get [ GOLD ]
- If you want to [ sell ]
- If you want to [ buy ]
- If you lost [ Account ]
- Any questions [ admin@0day.today ]
- Authorisation page
- Registration page
- Restore account page
- FAQ page
- Contacts page
- Publishing rules
- Agreement page
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
Contact us
You can contact us by:
Mail:
Facebook:
Twitter:
Telegram:
We DO NOT use Telegram or any messengers / social networks!
Nexus 9 With Malicious Headphones Vulnerability
Author
Risk
[Security Risk Medium
]0day-ID
Category
Date add
CVE
Platform
Title: Attacking Nexus 9 with Malicious Headphones Identifier: CVE-2017-0510 Severity: Critical Product: Google Nexus 9 Vulnerable Version: Android 7.1.1 N4F26Q and below Mitigation: Upgrade to build N4F26T (March 2017 Security patches). Technical Details: Nexus 9 (running build N4F26Q and below) allows unauthorized access to the FIQ debugger via its headphones jack, which has the following impact: 1. It enables sensitive information theft, via malicious headphones, out of arbitrary processes. For example, by exploiting this vulnerability we managed to leak stack canaries and weaken ASLR. 2. It allows the adversary access the Linux SysRq interface. 3. The attacker can reboot the device, via the FIQ debugger, into HBOOT, which may aid in further exploitation such as communicating with internal SoCs via I2C. 4. The attacker can conduct a Factory Reset. Research post with full details: https://alephsecurity.com/2017/03/08/nexus9-fiq-debugger/ Credit: 1. Roee Hay (@roeehay), Aleph Research, HCL Technologies. 2. Sagi Kedmi (@sagikedmi) ::DISCLAIMER:: ---------------------------------------------------------------------------------------------------------------------------------------------------- The contents of this e-mail and any attachment(s) are confidential and intended for the named recipient(s) only. E-mail transmission is not guaranteed to be secure or error-free as information could be intercepted, corrupted, lost, destroyed, arrive late or incomplete, or may contain viruses in transmission. The e mail and its contents (with or without referred errors) shall therefore not attach any liability on the originator or HCL or its affiliates. Views or opinions, if any, presented in this email are solely those of the author and may not necessarily reflect the views or opinions of HCL or its affiliates. Any form of reproduction, dissemination, copying, disclosure, modification, distribution and / or publication of this message without the prior written consent of authorized representative of HCL is strictly prohibited. If you have received this email in error please delete it and notify the sender immediately. Before opening any email and/or attachments, please check them for viruses and other defects. # 0day.today [2024-10-05] #