Samsung Omnia 7 - RapiConfig.exe Directory Traversal

    Type

  • Samsung Omnia 7 - RapiConfig.exe Directory Traversal
  • Severity

  • High
  • Affected products

  • Samsung Omnia 7
  • Date

  • 2011-11-10
  • CVE Reference

  • N/A

An executable was identified which could be used to perform device provisioning functionality in the context of the TCB user from the least privileged chamber (LPC) if the required capability (ID_CAP_INTEROPSERVICES) was provisioned.