Android Stagefright bug exploit sample code published

Stefan Mileschin · 11th September 2015, 09:46

Roughly a month after the frightful Stagefright Android vulnerability was disclosed, Zimperium's security researchers have published sample code for exploiting the bug. As a refresher, Stagefright is a critical vulnerability in Android that allows attackers to perform remote code execution, and it affected 95% of Android handsets at the time it was reported. For the nitty-gritty, you can watch this Black Hat conference video.

Since the disclosure, Google has published updated versions of its Hangouts and Messaging apps, plugging the worst of the attack vectors—a booby-trapped MMS could provide root access to an attacker, oftentimes with no indication to the user that something funky was happening. Zimperium notes that MMSs are only one of over ten attack vectors, though, ...

http://techreport.com/news/29015/and...code-published

11th September 2015, 09:46	#1
Stefan Mileschin [M] Reviewer Join Date: May 2010 Location: Romania Posts: 153,575	Android Stagefright bug exploit sample code published Roughly a month after the frightful Stagefright Android vulnerability was disclosed, Zimperium's security researchers have published sample code for exploiting the bug. As a refresher, Stagefright is a critical vulnerability in Android that allows attackers to perform remote code execution, and it affected 95% of Android handsets at the time it was reported. For the nitty-gritty, you can watch this Black Hat conference video. Since the disclosure, Google has published updated versions of its Hangouts and Messaging apps, plugging the worst of the attack vectors—a booby-trapped MMS could provide root access to an attacker, oftentimes with no indication to the user that something funky was happening. Zimperium notes that MMSs are only one of over ten attack vectors, though, ... http://techreport.com/news/29015/and...code-published

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
CyanogenMod gets Android 5.1 and Stagefright security fixes	Stefan Mileschin	WebNews	0	2nd September 2015 19:52
Fixing 'Stagefright' flaw on Android is harder than we thought	Stefan Mileschin	WebNews	0	14th August 2015 10:50
Android app tells you if you have 'Stagefright' vulnerability	Stefan Mileschin	WebNews	0	8th August 2015 16:18
Android 5.0 code reaches HTC, en route to One M8 and M7 ‘within 90 days’	Stefan Mileschin	WebNews	0	5th November 2014 09:33
Qualcomm briefly takes down Android code for CyanogenMod, Sony and itself	Stefan Mileschin	WebNews	0	7th July 2014 10:31
Chromecast bootloader exploit: it runs Android	Stefan Mileschin	WebNews	0	30th July 2013 09:52
NSA helped build Android source code	Stefan Mileschin	WebNews	0	12th July 2013 08:12
Hole found in Android code base	Stefan Mileschin	WebNews	0	5th July 2013 07:48
Viber exploit lets attackers bypass Android lock screens, for now	Stefan Mileschin	WebNews	0	26th April 2013 09:19
Attack Code Published For DNS Vulnerability	jmke	WebNews	0	24th July 2008 10:00