Thursday, October 1, 2015 12:39 pm > 9k
Continue to follow up reports of vulnerabilities in Android and more Recent gives failure to account on how the operating system handles MP3 and MP4 files, which allows the execution of malicious code from websites
. According to investigators the Zimperium, the problem arises when any app uses the Media libraries Android to preview these audio or video content, and recalls the problem also detected by Zimperium in libraria Stagefright.
The vulnerability, this time located in “libutils” and affects all Android versions prior to Android 5.0, but can be exploited in Android latest Lollipop, traveled together with a new bug in Stagefright
.
The good news is that the scanning vector via MMS has been corrected after the knowledge of Stagefright vulnerability, but the bad news say now just take the user to have to click on malicious links in emails or malicious advertisements on legitimate sites, and hackers able to intercept communications on open networks can inject code directly in traffic
. Finally, multimedia apps that make use of the libutils to read metadata about media files, too could be explored
.
The solution
Google is informed of vulnerabilities, which received the CVE-2015-3876 and CVE-2015-6602 codes, and will release a fix start on Saturday 05 October, and has shared solutions to manufacturers smartphone
. The whole thing may not end up here because following the first major vulnerability found in Stagefright, the attentions of hackers and security companies concentrated if in multimedia libraries of the Android system and various problems have been reported, although variable dimension. It is therefore expected that new vulnerabilities can still be found
.
Popular Posts
-
The Messenger Day will allow you to send photos, videos, and stickers that disappear in 24 hours, such as Snapchat After the Instagram ...
-
Despite the PlayStation VR will not be compatible with other devices such as PC, Xbox One and Wii U, the new virtual reality helmet from ...
-
The market for smart watches just won a novelty. Adidas announced on Wednesday (16) one smartwatch for runners with GPS tracking and he...
-
company administrator who manages the Health Line 24 revealed that half of the workers did not attend Saturday’s service, without any pri...
-
Sao Paulo – A study conducted over the past 15 years promises to shake up what scientists know about the universe . The research states...
-
The United States government began to consider a federal crime the act of boarding airplanes within the country carrying a Galaxy Note 7...
-
Erica Fontes, House of Secrets, Benfica, Chocolate Cake and Social Security are the most popular. Throughout 2013, the Portuguese wa...
-
Facebook has released a function that allows you to watch the videos in the feed directly on the TV. When playing back a content in the ...
-
The world of virtual reality is becoming more real. After being introduced several systems for VR content viewing, it’s time these begin to...
-
The home button has always been of the things that broke in all versions of the iPhone, without exception. After so many complaint...
