Android Stagefright contains multiple vulnerabilities

🗓️ 28 Jul 2015 00:00:00Reported by CERTType

Android Stagefright vulnerabilities in Android 2.2 to 5.1.1_r9. Allows remote code execution through multimedia messages, libutils, and libstagefright. ASLR mitigates but partial fixes available for specific devices

Reporter	Title	Published	Views	Family All 75
0day.today	Android Stagefright - Remote Code Execution Exploit	9 Sep 201500:00	–	zdt
Android Security Bulletins	Nexus Security Bulletin—August 2015Stay organized with collectionsSave and categorize content based on your preferences.	13 Aug 201500:00	–	androidsecurity
android	CVE-2015-1538	1 Aug 201500:00	–	android
android	CVE-2015-1539	1 Aug 201500:00	–	android
android	CVE-2015-3824	1 Aug 201500:00	–	android
android	CVE-2015-3827	1 Aug 201500:00	–	android
android	CVE-2015-3828	1 Aug 201500:00	–	android
android	CVE-2015-3829	1 Aug 201500:00	–	android
android	CVE-2015-3864	1 Sep 201500:00	–	android
android	Stagefright	21 Jul 201500:00	–	android

Source	Link
groups	www.groups.google.com/forum/
blog	www.blog.zimperium.com/zimperium-zlabs-is-raising-the-volume-new-vulnerability-processing-mp3mp4-media/
blog	www.blog.zimperium.com/the-latest-on-stagefright-cve-2015-1538-exploit-is-now-available-for-testing-purposes/
blog	www.blog.zimperium.com/stagefright-vulnerability-details-stagefright-detector-tool-released/
blog	www.blog.zimperium.com/experts-found-a-unicorn-in-the-heart-of-android/
forbes	www.forbes.com/sites/thomasbrewster/2015/07/27/android-text-attacks/
zdnet	www.zdnet.com/article/stagefright-just-how-scary-is-it-for-android-users/
arstechnica	www.arstechnica.com/security/2015/07/950-million-android-phones-can-be-hijacked-by-malicious-text-messages/
android	www.android.googlesource.com/platform/frameworks/av/+/0e4e5a8%5E!/
android	www.android.googlesource.com/platform/frameworks/av/+/5c134e6%5E!/

08 Jan 2016 14:19Current

8.2High risk

Vulners AI Score8.2

CVSS 210

EPSS0.87202