Candidate: CVE-2015-6608 PublicDate: 2015-11-03 11:59:00 UTC References: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-6608 https://groups.google.com/forum/message/raw?msg=android-security-updates/n1aw2MGce4E/jhpVEWDUCAAJ Description: mediaserver in Android 5.x before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted media file, aka internal bugs 19779574, 23680780, 23876444, and 23658148, a different vulnerability than CVE-2015-8072 and CVE-2015-8073. Ubuntu-Description: Notes: jdstrand> as with previous stagefright issues, this issue affects Ubuntu's android packages, but not in a way that is exposed to apps. See CVE-2015-1538 for details Bugs: Priority: negligible Discovered-by: Assigned-to: CVSS: Tags_android: apparmor Patches_android: upstream_android: released (5.1.1 LMY48X) precise_android: DNE trusty_android: ignored trusty/esm_android: DNE (trusty was ignored) vivid_android: ignored vivid/stable-phone-overlay_android: ignored vivid/ubuntu-core_android: DNE wily_android: ignored devel_android: ignored