CVE:CVE-2014-8156
CNNVD:CNNVD-201501-693
freesmartphone.org是一套基于Linux嵌入式系统的中间件平台。
freesmartphone.org中存在本地安全绕过漏洞，该漏洞源于程序没有正确的过滤D-Bus消息路径。本地攻击者可通过向D-Bus系统服务发送特制的D-Bus消息利用该漏洞造成拒绝服务（dbus-daemon内存损坏）或以root权限执行代码。
solution:Upgrade fso-frameworkd_project fso-frameworkd to a higher version than 0.9.5.9,and avoid the version 0.9.5.9; Upgrade fso-gsmd_project fso-gsmd to a higher version than 0.12.0-3,and avoid the version 0.12.0-3; Upgrade fso-usaged_project fso-usaged to a higher version than 0.12.0-2,and avoid the version 0.12.0-2; Upgrade phonefsod_project phonefsod to a higher version than 0.1,and avoid the version 0.1