CVE-2016-3996

ClipboardDataMgr in Samsung KNOX 1.0.0 and 2.3.0 does not properly check the caller, which allows local users to read KNOX clipboard data via a crafted application.

Score

CVSS 3.0 5.5 Medium

Status

Modified - cve@mitre.org

Published

2017-01-27

Last modified

2024-08-06

Weaknesses

CWE-200

Affected products

• Knox (Samsung)

References

• http://packetstormsecurity.com/files/136710/KNOX-2.3-Clipboard-Data-Disclosure.html
• http://www.securityfocus.com/archive/1/538113/100/0/threaded