An escalation of privileges is when a user with limited permissions is able, through some security flaw, to elevate their role until they have more capabilities in the execution of their code, in this case this case reaches the root superuser.

Of the two possible codes, the second accompanies some simple instructions on how to “do evil” to an Android device, from this moment the device is compromised. Imagine this, for example, in an application of dubious origin that you install from the Market, it could obtain and send all your information. Or looking on the bright side, a more open gap to be able to root all versions of Android

The affected devices are:

  • Open Handset Alliance Android 2.3
  • Open Handset Alliance Android 2.2
  • Open Handset Alliance Android 2.1
  • Open Handset Alliance Android 1.5 CRCxx
  • Open Handset Alliance Android 1.5 CRBxx
  • Open Handset Alliance Android 1.5 CRB-43
  • Open Handset Alliance Android 1.5 CRB-42
  • Open Handset Alliance Android 1.5 COCxx
  • Open Handset Alliance Android 1.5 CBDxx
  • Open Handset Alliance Android 1.5
  • Open Handset Alliance Android 1.0
  • HTC HTC Wildfire 0

Attack source code:

Source: SecurityFocus