CVEs-PoC/2016/CVE-2016-3996.md

CVE-2016-3996

Description

ClipboardDataMgr in Samsung KNOX 1.0.0 and 2.3.0 does not properly check the caller, which allows local users to read KNOX clipboard data via a crafted application.

POC

Reference

• http://packetstormsecurity.com/files/136710/KNOX-2.3-Clipboard-Data-Disclosure.html
• http://packetstormsecurity.com/files/136710/KNOX-2.3-Clipboard-Data-Disclosure.html

Github

• https://github.com/ARPSyndicate/cvemon