{"id":"CVE-2011-3874","published":"2012-01-27T15:00:00Z","modified":"2024-09-17T04:20:10Z","title":"Stack-based buffer overflow in libsysutils in Android 2.2.x through 2.2.2 and 2.3.x through 2.3.6 allows user-assisted…","vendor":null,"product":null,"tier":"core","eol":null,"description":{"text":"Stack-based buffer overflow in libsysutils in Android 2.2.x through 2.2.2 and 2.3.x through 2.3.6 allows user-assisted remote attackers to execute arbitrary code via an application that calls the FrameworkListener::dispatchCommand method with the wrong number of arguments, as demonstrated by zergRush to trigger a use-after-free error.","provenance":"source","from":"CVE.org"},"summary":{"text":"A stack-based buffer overflow in libsysutils affects Android 2.2.x through 2.2.2 and 2.3.x through 2.3.6, allowing user-assisted remote attackers to execute arbitrary code via an application that calls the FrameworkListener::dispatchCommand method with the wrong number of arguments.","provenance":"ai","model":"deepseek-v4-flash","generatedAt":"2026-10-23T03:20:28Z"},"cvss":null,"epss":{"score":0.11432,"percentile":0.95989,"date":"2026-10-28","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[],"references":[{"url":"http://www.openwall.com/lists/oss-security/2011/11/08/3","tags":["mailing-list","x_refsource_MLIST"]},{"url":"https://github.com/revolutionary/zergRush/blob/master/zergRush.c","tags":["x_refsource_MISC"]},{"url":"http://www.openwall.com/lists/oss-security/2011/11/10/1","tags":["mailing-list","x_refsource_MLIST"]},{"url":"http://code.google.com/p/android/issues/detail?id=21681","tags":["x_refsource_CONFIRM"]},{"url":"http://www.openwall.com/lists/oss-security/2011/11/08/4","tags":["mailing-list","x_refsource_MLIST"]}],"techniques":[],"reports":[{"id":"SRC-619721166ae9d9d7fdcd","title":"Microsoft Security","publisher":"download.microsoft.com","url":"https://download.microsoft.com/download/4/4/C/44CDEF0E-7924-4787-A56A-16261691ACE3/Microsoft_Security_Intelligence_Report_Volume_19_English.pdf","date":null,"mentions":[{"quote":"gence Report, Volume\r\n18 (July–December 2014), available from the Microsoft Download Center, for\r\n0.00%\r\n0.05%\r\n0.10%\r\n0.15%\r\n0.20%\r\n0.25%\r\n0.30%\r\n0.35%\r\n0.40%\r\n3Q14 4Q14 1Q15 2Q15\r\nEncounter rate (percent of all reporting computers)\r\nWin32/CplLnk\r\nCVE-2014-6332\r\nUnix/Lotoor\r\nCVE-2011-1823\r\n(GingerBreak)\r\nCVE-2011-3874","start":88697,"end":89017},{"quote":" CVE-2011-3874 can also be used to gain root privileges on devices","start":90857,"end":90924},{"quote":"CVE-2011-3874, 50, 51","start":238057,"end":238078}]}],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2011-3828","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2011-3828","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":null,"exploitRefs":[],"flow":[],"timeline":[{"date":"2012-01-27","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2011-3874","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":null},"priority":{"score":23.1,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.2,"detail":"percentile 0.9599"},{"name":"Named in threat reports","points":3.87,"detail":"1 report"},{"name":"Public exploit code","points":0.0,"detail":"none found"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":0.0,"detail":"no CVSS"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}