Description
The backup mechanism in the adb tool in Android might allow attackers to inject additional applications (APKs) and execute arbitrary code by leveraging failure to filter application data streams.
References
- 20150710 CVE-2014-7952, Android ADB backup APK injection vulnerability mailing-list
- http://packetstormsecurity.com/files/132645/ADB-Backup-APK-Injection.html
- http://www.search-lab.hu/about-us/news/110-android-adb-backup-apk-injection-vulnerability
- https://github.com/irsl/ADB-Backup-APK-Injection/
- 75705 vdb-entry
- 20150710 CVE-2014-7952, Android ADB backup APK injection vulnerability mailing-list