155 matches found
Warning — Hackers can Silently Install Malware to Non-Jailbroken iOS Devices
Hard time for mobile phone users! Just recently, two severe vulnerabilities in Qualcomm Snapdragon chip and Stagefright were spotted on the Android platform, affecting more than a Billion and Millions of devices respectively. And now: Hackers have discovered a new way to install malicious apps on...
New Exploit to 'Hack Android Phones Remotely' threatens Millions of Devices
Attention Android users! Millions of Android devices are vulnerable to hackers and intelligence agencies once again – Thanks to a newly disclosed Android Stagefright Exploit. Yes, Android Stagefright vulnerability is Back… …and this time, the Stagefright exploit allows an attacker to hack Android...
The vulnerability of the Android operating system, which allows a perpetrator to obtain confidential information or bypass security mechanisms
The vulnerability of the libstagefright library in the Android operating system is related to the lack of protection for service data. Exploiting this vulnerability can allow a malicious actor, acting remotely, to obtain confidential information or bypass security mechanisms...
Samsung Get Sued for Failing to Update its Smartphones
One of the world's largest smartphone makers is being sued by the Dutch Consumers' Association DCA for its lack in providing timely software updates to its Android smartphones. This doesn't surprise me, though. The majority of manufacturers fail to deliver software updates for old devices for...
Mike Mimoso and Chris Brook Discuss the Threats of 2015
With 2015 more or less in the rear view mirror Mike Mimoso and Chris Brook discuss the year in security: Wassenaar, ransomware, Carbanak and Equation Group,how big of a deal Stagefright was, that Juniper backdoor, and more. Download: tp2015inreview.mp3 Music by Chris Gonsalves...
Mozilla Firefox-bit platforms integer overflow vulnerability
Mozilla Firefox and Firefox ESR are both browser products developed by the Mozilla Foundation in the U.S. Firefox is an open-source web browser; Firefox ESR is an extended-support version of Firefox. libstagefright is one of the hard-coding support libraries. The MPEG4Extractor.cpp file in the...
Mozilla: Integer overflow in MP4 playback in 64-bit versions (MFSA 2015-146)
Integer overflow in the MPEG4Extractor::readMetaData function in MPEG4Extractor.cpp in libstagefright in Mozilla Firefox before 43.0 and Firefox ESR 38.x before 38.5 on 64-bit platforms allows remote attackers to execute arbitrary code via a crafted MP4 video file that triggers a buffer overflow...
AndroidVTS: Android cell phone vulnerabilities the defect detection App-vulnerability warning-the black bar safety net
Android users now have a light weight cell phone vulnerabilities the defect inspection tool to help users check their phone if there is a corresponding vulnerability. The tool is called Android VTS Vulnerability Test Suite, is Nownature released an app of the application tool. Android VTS is base...
1-Click Way to Check If your Android Device is Vulnerable to Hacking
Vulnerabilities are common these days and when we talk about mobile security, this year has been somewhat of a trouble for Android users. Almost every week we come across a new hack affecting Android devices. One of the serious vulnerabilities is the Stagefright Security Bug, where all it needed ...
CVE-2015-6610
libstagefright in Android before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows attackers to gain privileges or cause a denial of service memory corruption via a crafted application, aka internal bug 23707088...
CVE-2015-8072
mediaserver in Android 4.4 through 5.x before 5.1.1 LMY48X and 6.0 before 2015-11-01 allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bug 23881715, a different vulnerability than CVE-2015-6608 and CVE-2015-8073...
CVE-2015-8073
mediaserver in Android 4.4 and 5.1 before 5.1.1 LMY48X allows remote attackers to execute arbitrary code or cause a denial of service memory corruption via a crafted media file, aka internal bug 14388161, a different vulnerability than CVE-2015-6608 and CVE-2015-8072...
Backdoor in Baidu Android SDK Puts 100 Million Devices at Risk
The China's Google-like Search Engine Baidu is offering a software development kit SDK that contains functionality that can be abused to give backdoor-like access to a user's device, potentially exposing around 100 Million Android users to malicious hackers. The SDK in question is Moplus, which m...
November 2015 Android Security Bulletin
The Stagefright vulnerabilities are the gifts that keep on giving. Months after the potentially devastating security flaws in the mobile OS were publicly disclosed, Google continues to send out patches addressing vulnerabilities related to the initial reports. Today’s monthly Android security...
Vulnerabilities of the Android operating system that allow a hacker to execute arbitrary code
The multiple vulnerabilities in the BnHDCP::onTransact function of the libstagefright library in the Android operating system are caused by buffer overflows. Exploiting these vulnerabilities could allow a malicious actor to execute arbitrary code using a specially crafted application...
The vulnerability of the Android operating system, which allows a hacker to execute arbitrary code or cause a service failure
The vulnerability of the MPEG4Extractor::parseChunk function in the libstagefright library of the Android operating system is related to integer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure by using specially crafted MPEG-4...
The vulnerability of the Android operating system allows a hacker to execute arbitrary code using specially crafted MP3 or MP4 files.
The vulnerability of the libstagefright library in the Android operating system exists due to insufficient validation of input data. Exploiting this vulnerability allows a malicious actor to execute arbitrary code using specially crafted MP3 or MP4 file headers...
Vulnerabilities of the Android operating system that allow a hacker to execute arbitrary code
The multiple vulnerabilities of the ESDS::parseESDescriptor function in the libstagefright library of the Android operating system are related to integer overflow. Exploiting these vulnerabilities could allow a malicious actor to execute arbitrary code using specially crafted ESDS data...
Stagefright 2.0 vulnerability struck by the impact on the billion Android users-vulnerability warning-the black bar safety net
Android users Note:Due to the latest two latest stagefright vulnerability disclosure, estimated at more than 1 0 million Android users of the system will suffer this vulnerability. Yes, that stagefright vulnerability and return! This year 7 month, Zimperium company security researchers...
Google released Android Stagefright 2.0 vulnerability security patches-bug warning-the black bar safety net
! It was reported that Google fixes Android latest Stagefright 2.0 vulnerabilities, and by OTA to the Nexus devices to push the update. However, Samsung, LG, HTC, and other manufacturers of Android devices need a period of time in order to receive this vulnerability update. Stagefright series...