491 matches found
Qualcomm Adreno GPU MSM Driver - perfcounter Query Heap Overflow
/ Source: https://code.google.com/p/google-security-research/issues/detail?id=734 The Adreno GPU driver for the MSM Linux kernel contains a heap overflow in the IOCTLKGSLPERFCOUNTERQUERY ioctl command. The bug results from an incorrect conversion to a signed type when calculating the minimum coun...
Linux Kernel - io_submit L2TP sendmsg Integer Overflow
/ Source: https://code.google.com/p/google-security-research/issues/detail?id=735 In certain kernel versions it is possible to use the AIO subsystem iosubmit syscall to pass size values larger than MAXRWCOUNT to the networking subsystem's sendmsg implementation. In the L2TP PPP sendmsg...
Hacking Smartphones Running on MediaTek Processors
A dangerous backdoor has been discovered in the MediaTek processor that could be exploited to hack Android devices remotely. MediaTek is a Taiwan-based hardware company that manufacture hardware chips and processor used in the smartphones and tablets. The backdoor was discovered by security...
ACTi E31 surveillance Cameras 弱密码漏洞
Introduction The Perception Point Research team has identified a 0-day local privilege escalation vulnerability in the Linux kernel. While the vulnerability has existed since 2012, our team discovered the vulnerability only recently, disclosed the details to the Kernel security team, and later...
The use of the Linux kernel information leak to bypass the kALSR protection mechanisms-vulnerability warning-the black bar safety net
A preliminary description of the Since it has been in the linux kernel fix, so there is nothing concern about this vulnerability. http://git.kernel.org/cgit/linux/kernel/git/torvalds/linux.git/commit/?id=b2f73922d119686323f14fbbe46587f863852328 According to the researchers know, the mainstream...
Linux Kernel Privilege Escalation Flaw Patched
A patch for a critical Linux kernel flaw, present in the code since 2012, is expected to be pushed out today. The vulnerability affects versions 3.8 and higher, said researchers at startup Perception Point who discovered the vulnerability. The flaw also extends to two-thirds of Android devices, t...
Linux Kernel Vulnerability
US-CERT is aware of a Linux kernel vulnerability affecting Linux PCs and servers and Android-based devices. Exploitation of this vulnerability may allow an attacker to take control of an affected system. US-CERT recommends that users and administrators review the Redhat Security Blog and the Debi...
Shuanet Adware Roots Android Devices
A new strain of adware buried in repackaged popular Android applications is able to root devices and earn its keepers a tidy $2 per installation. Shuanet behaves more like malware and shares some heritage with two other adware families—Kemoge and Shedun—that also root devices and give their...
Samsung Galaxy S6 Edge Security Vulnerabilities
Google’s Nexus Android devices are considered the most secure by default since they’re guaranteed to receive all security patches for vulnerabilities found internally and those disclosed by third parties. Google’s Project Zero research team, however, decided to expand its reach and test the water...
CVE-2013-6282
The 1 getuser and 2 putuser API functions in the Linux kernel before 3.5.5 on the v6k and v7 ARM platforms do not validate certain addresses, which allows attackers to read or modify the contents of arbitrary kernel memory locations via a crafted application, as exploited in the wild against...
Mike Mimoso and Chris Brook Discuss the Diffie-Hellman News, the Security of Android Devices, and More
Mike Mimoso and Chris Brook discuss the news of the week – how a weakness in the Diffie-Hellman protocol could be the key to breaking crypto, a paper that claims 85 percent of Android devices contain at least one critical vulnerability, and the Netgear debacle. Download: newswrap10-16-15.mp3 Musi...
Kemoge Malicious Adware Campaign
Google has been busy removing a number of apps from Google Play that are disguised as popular selections that are actually pushing what starts out as adware but eventually turns more malicious. Google has already yanked down a file-transfer app called ShareIt, developed by Zhang Long of China, wh...
Newphoria Auction Camera Application Authentication Bypass Vulnerability
Newphoria Auction Camerafor for iOS and Android is a suite of online video preview and recording applications for iOS and Android platforms from Newphoria Japan. A security restriction bypass vulnerability exists in the Newphoria Auction Camera application. Allows an attacker to bypass URL...
NTT Broadband Platform Japan Connected-free Wi-Fi Application Cross-Site Scripting Vulnerability
NTT Broadband Platform Japan Connected-free Wi-Fi application for Android and iOS is a suite of Android and iOS-based applications from NTT Broadband Platform Japan for finding and automatically connecting to nearby free Wi-Fi in Japan. free Wi-Fi application for Android and iOS by NTT Broadband...
Google Stagefright Media Playback Engine Remote Code Execution Vulnerability (CNVD-2015-05025)
Stagefright is a media playback service for Android, introduced since version 2.2 Froyo. A remote code execution vulnerability exists in the Google Stagefright Media Playback Engine, which can be exploited by an attacker to execute arbitrary code in the context of an affected device...
Google Stagefright Media Playback Engine Remote Code Execution Vulnerability (CNVD-2015-05027)
Stagefright is a media playback service for Android, introduced since version 2.2 Froyo. A remote code execution vulnerability exists in the Google Stagefright Media Playback Engine, which can be exploited by an attacker to execute arbitrary code in the context of an affected device...
Change to Lollipop Encryption Policy May Not Have Much Effect, Experts Say
Google has made a subtle, but important, shift in the requirements for Android handset makers, saying now that OEMs manufacturing phones that will run Lollipop do not have to enable disk encryption by default. This is a major change from the company’s stated position from just a few months ago, b...
Hackers Can Remotely Install Malware Apps to Your Android Device
Security researchers have warned of a pair of vulnerabilities in the Google Play Store that could allow cyber crooks to install and launch malicious applications remotely on Android devices. Tod Beardsley, technical lead for the Metasploit Framework at Rapid7 warns that an X-Frame-Options XFO...
Denial of Service Vulnerability in Multiple Android Devices
Wi-Fi Direct supports one-to-one connectivity for multiple devices at the same time, and the Wi-Fi Direct standard will support all Wi-Fi devices. A denial of service vulnerability exists in multiple Android Devices, allowing attackers to launch denial of service attacks...
