CVE-2017-0497

MEDIUM

Google Android - Denial of Service

Title source: rule

Description

A denial of service vulnerability in Mediaserver could enable an attacker to use a specially crafted file to cause a device hang or reboot. This issue is rated as Moderate because it requires an uncommon device configuration. Product: Android. Versions: 7.0, 7.1.1. Android ID: A-33300701.

Exploits (1)

github SUSPICIOUS 8 stars

by codecat007 · cpoc

https://github.com/codecat007/cvehub/tree/main/android/CVE-2017-0497

View Code ZIP pw:eip

References (4)

[Vendor Advisory] https://source.android.com/security/bulletin/2017-03-01

[Vendor Advisory] https://source.android.com/security/bulletin/2017-03-01.html

[Third Party Advisory, VDB Entry] http://www.securityfocus.com/bid/96795

[Third Party Advisory, VDB Entry] http://www.securitytracker.com/id/1037968

Scores

CVSS v3 4.7

EPSS 0.0015

EPSS Percentile 34.9%

Attack Vector LOCAL

CVSS:3.0/AV:L/AC:H/PR:N/UI:R/S:U/C:N/I:N/A:H

Details

Status published

Products (5)

google/android 7.0

google/android 7.1.0

google/android 7.1.1

Google Inc./Android Android-7.0

Google Inc./Android Android-7.1.1

Published Mar 08, 2017

Tracked Since Feb 18, 2026