Stagefright Variant 'Metaphor' Puts Millions Of Samsung, LG and HTC Phones At Risk

🗓️ 17 Mar 2016 18:41:03Reported by Tom SpringType

threatpost

threatpost🔗 threatpost.com👁 36 Views

'Metaphor' exploit puts million Android phones at ris

Reporter	Title	Published	Views	Family All 25
0day.today	Android libstagefright - Integer Overflow Remote Code Execution	18 Sep 201500:00	–	zdt
0day.today	Android Stagefright MP4 tx3g Integer Overflow Exploit	27 Sep 201600:00	–	zdt
0day.today	Android 5.0.1 - Metaphor Stagefright Exploit (ASLR Bypass)	30 Mar 201600:00	–	zdt
Android Security Bulletins	Nexus Security Bulletin - September 2015Stay organized with collectionsSave and categorize content based on your preferences.	9 Sep 201500:00	–	androidsecurity
android	CVE-2015-3864	1 Sep 201500:00	–	android
android	Metaphor	9 Jul 201900:00	–	android
BDU FSTEC	The vulnerability of the Android operating system, allowing a hacker to execute arbitrary code	13 Oct 201500:00	–	bdu_fstec
Circl	CVE-2015-3864	17 Sep 201500:00	–	circl
CNVD	Google Android Stagefright Integer Overflow Vulnerability	23 Sep 201500:00	–	cnvd
Check Point Advisories	Google Android Stagefright MP4 Multiple Atoms Integer Overflow (CVE-2015-1538; CVE-2015-3824; CVE-2015-3829; CVE-2015-3864)	12 Aug 201500:00	–	checkpoint_advisories

Source	Link
exploit-db	www.exploit-db.com/docs/39527.pdf
googleprojectzero	www.googleprojectzero.blogspot.co.uk/2015/09/stagefrightened.html
threatpost	www.threatpost.com/android-stagefright-exploit-code-released-to-public/114601/
threatpost	www.threatpost.com/google-fixes-critical-android-mediaserver-bugs-again/116614/

17 Mar 2016 22:41Current

7High risk

Vulners AI Score7

EPSS0.87125

android exploit metaphor samsung lg htc vulnerability stagefright northbit malware security mediaserver hack patching aslr javascript malware nexus 5