{"action":"created","issue":{"url":"https://api.github.com/repos/nowsecure/android-vts/issues/99","repository_url":"https://api.github.com/repos/nowsecure/android-vts","labels_url":"https://api.github.com/repos/nowsecure/android-vts/issues/99/labels{/name}","comments_url":"https://api.github.com/repos/nowsecure/android-vts/issues/99/comments","events_url":"https://api.github.com/repos/nowsecure/android-vts/issues/99/events","html_url":"https://github.com/nowsecure/android-vts/issues/99","id":121910382,"number":99,"title":"Don't see new vulnerabilities (CVE-2015-6616, CVE-2015-6617, CVE-2015-6619, CVE-2015-6633, CVE-2015-6634) in VTS","user":{"login":"Timon34","id":15920911,"avatar_url":"https://avatars.githubusercontent.com/u/15920911?v=3","gravatar_id":"","url":"https://api.github.com/users/Timon34","html_url":"https://github.com/Timon34","followers_url":"https://api.github.com/users/Timon34/followers","following_url":"https://api.github.com/users/Timon34/following{/other_user}","gists_url":"https://api.github.com/users/Timon34/gists{/gist_id}","starred_url":"https://api.github.com/users/Timon34/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Timon34/subscriptions","organizations_url":"https://api.github.com/users/Timon34/orgs","repos_url":"https://api.github.com/users/Timon34/repos","events_url":"https://api.github.com/users/Timon34/events{/privacy}","received_events_url":"https://api.github.com/users/Timon34/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":4,"created_at":"2015-12-13T09:52:58Z","updated_at":"2016-02-08T16:24:36Z","closed_at":"2015-12-13T22:44:52Z","body":"In December 2015 Google released an update for OS Android, that fixes 19 vulnerabilities, including 5 critical, 12 high and 2 moderate.\r\nAccording to the security bulletin, critical vulnerability (CVE-2015-6616, CVE-2015-6617, CVE-2015-6619, CVE-2015-6633, CVE-2015-6634) contained in components for handling multimedia content and Android lets you remotely execute code with root privileges.\r\nCVE-2015-6616 and CVE-2015-6617 affects all versions of Android. Operation flaw allows an attacker to execute code via a speciall MMS-message or media file. Also eliminated the vulnerability at the core of Android, allows third-party applications to execute code with root privileges.\r\nIn addition, fixed a number of privilege elevation vulnerability affecting other components of the OS, including Bluetooth and Wi-Fi, a library libstagefright, system application SystemUI and so on. These flaws were rated with high severity.\r\n\r\nBut current version v.12 of VTS don't know about such vulnerabilities. Are there any plans to add them?"},"comment":{"url":"https://api.github.com/repos/nowsecure/android-vts/issues/comments/181448233","html_url":"https://github.com/nowsecure/android-vts/issues/99#issuecomment-181448233","issue_url":"https://api.github.com/repos/nowsecure/android-vts/issues/99","id":181448233,"user":{"login":"Timon34","id":15920911,"avatar_url":"https://avatars.githubusercontent.com/u/15920911?v=3","gravatar_id":"","url":"https://api.github.com/users/Timon34","html_url":"https://github.com/Timon34","followers_url":"https://api.github.com/users/Timon34/followers","following_url":"https://api.github.com/users/Timon34/following{/other_user}","gists_url":"https://api.github.com/users/Timon34/gists{/gist_id}","starred_url":"https://api.github.com/users/Timon34/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/Timon34/subscriptions","organizations_url":"https://api.github.com/users/Timon34/orgs","repos_url":"https://api.github.com/users/Timon34/repos","events_url":"https://api.github.com/users/Timon34/events{/privacy}","received_events_url":"https://api.github.com/users/Timon34/received_events","type":"User","site_admin":false},"created_at":"2016-02-08T16:24:36Z","updated_at":"2016-02-08T16:24:36Z","body":"There is need to add 10 new tests from February 2016 Security Bulletin http://source.android.com/security/bulletin/2016-02-01.html\r\n\r\nRemote Code Execution Vulnerability in Broadcom Wi-Fi Driver CVE-2016-0801 CVE-2016-0802\tCritical\r\nRemote Code Execution Vulnerability in Mediaserver CVE-2016-0803 CVE-2016-0804 Critical\r\nElevation of Privilege Vulnerability in Qualcomm Performance Module CVE-2016-0805 Critical\r\nElevation of Privilege Vulnerability in Qualcomm Wi-Fi Driver CVE-2016-0806 Critical\r\nElevation of Privilege Vulnerability in the Debugger Daemon CVE-2016-0807 Critical\r\nDenial of Service Vulnerability in Minikin CVE-2016-0808 High\r\nElevation of Privilege Vulnerability in Wi-Fi CVE-2016-0809 High\r\nElevation of Privilege Vulnerability in Mediaserver CVE-2016-0810 High\r\nInformation Disclosure Vulnerability in libmediaplayerservice CVE-2016-0811 High\r\nElevation of Privilege Vulnerability in Setup Wizard CVE-2016-0812 CVE-2016-0813 Moderate"}}