CVE-2017-12816

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

In Kaspersky Internet Security for Android 11.12.4.1622, some of application exports activities have weak permissions, which might be used by a malware application to get unauthorized access to the product functionality by using Android IPC.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-732

Affected software

Vendor	Product	Versions
Kaspersky Lab	Kaspersky Lab Kaspersky Internet Security for Android 11.12.4.1622	Kaspersky Lab Kaspersky Internet Security for Android 11.12.4.1622

References

http://www.securityfocus.com/bid/100505Third Party Advisory, VDB Entry
https://support.kaspersky.com/vulnerability.aspx?el=12430#090817Vendor Advisory
http://www.securityfocus.com/bid/100505Third Party Advisory, VDB Entry
https://support.kaspersky.com/vulnerability.aspx?el=12430#090817Vendor Advisory

Timeline

Published: Aug 25, 2017
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2017

CVE-2017-128177.5In Kaspersky Internet Security for Android 11.12.4.1622, some of the application trace files were not encrypted.CVE-2017-128187.5Stack overflow in custom XML-parser in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55 le CVE-2017-128199.8Remote manipulations with language pack updater lead to NTLM-relay attack for system user in Gemalto's HASP SRM, Sentinel HASP and Sentinel CVE-2017-12825.4IBM Content Navigator & CMIS 2.0 and 3.0 is vulnerable to cross-site scripting. This vulnerability allows users to embed arbitrary JavaScrip CVE-2017-128207.5Arbitrary memory read from controlled memory pointer in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RT CVE-2017-128219.8Memory corruption in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE version 7.55 might cause remote c CVE-2017-128229.9Remote enabling and disabling admin interface in Gemalto's HASP SRM, Sentinel HASP and Sentinel LDK products prior to Sentinel LDK RTE versi CVE-2017-128237.8Kernel pool memory corruption in one of drivers in Kaspersky Embedded Systems Security version 1.2.0.300 leads to local privilege escalation CVE-2017-128247.8Special crafted InPage document leads to arbitrary code execution in InPage reader.CVE-2017-12834.3IBM WebSphere MQ 8.0 and 9.0 could allow an authenticated user to cause a shared memory leak by MQ applications using dynamic queues, which CVE-2017-128367.5CVS 1.12.x, when configured to use SSH for remote repositories, might allow remote attackers to execute arbitrary code via a repository URL CVE-2017-128377.5Heap-based buffer overflow in the S_regatom function in regcomp.c in Perl 5 before 5.24.3-RC1 and 5.26.x before 5.26.1-RC1 allows remote att