New MMS vulnerability in Android found

Tech news
Post Reply
kevm14
Posts: 15200
Joined: Wed Oct 23, 2013 10:28 pm

New MMS vulnerability in Android found

Post by kevm14 »

Adam
Posts: 2240
Joined: Wed Oct 23, 2013 9:50 pm

Re: New MMS vulnerability in Android found

Post by Adam »

kevm14 wrote:http://www.theverge.com/2015/7/27/90458 ... ploit-hack

Good luck patching older phones.
Or even newer phones.
Adam
Posts: 2240
Joined: Wed Oct 23, 2013 9:50 pm

Re: New MMS vulnerability in Android found

Post by Adam »

http://blog.zimperium.com/experts-found ... f-android/
Blog posting from the guys who found it.
kevm14
Posts: 15200
Joined: Wed Oct 23, 2013 10:28 pm

Re: New MMS vulnerability in Android found

Post by kevm14 »

If ‘Heartbleed’ from the PC era sends chill down your spine, this is much worse.
Nice, if a bit dramatic.
Adam
Posts: 2240
Joined: Wed Oct 23, 2013 9:50 pm

Re: New MMS vulnerability in Android found

Post by Adam »

Effects every Android phone running 2.2 or newer. Mozilla's Firefox OS is fixed as of v38. SilentCircle’s Blackphone is patched as of v1.1.7. That's it, though. It isn't in the AOSP baseline yet.

These guys are presenting information about this during Black Hat this year, which starts August 5th. I will post an update with a link to the presentation when this happens.
Adam
Posts: 2240
Joined: Wed Oct 23, 2013 9:50 pm

Re: New MMS vulnerability in Android found

Post by Adam »

Correction: the Mozilla issue was in the Firefox browser, which uses the same library for stuff.

Update: Google is pushing out patches for Nexus devices. In addition, they are looking to implement monthly patches.
https://threatpost.com/google-plans-mon ... nes/114148
Adam
Posts: 2240
Joined: Wed Oct 23, 2013 9:50 pm

Re: New MMS vulnerability in Android found

Post by Adam »

Post Reply