Friday, October 2, 2015

Android smartphones at risk: Just one song to open failure … – PT Journal

Stagefright 2. For the second time, a vulnerability threat devices with the Android system. According to Zimperium, open a music MP3 is enough to compromise the safety of the product. Estimates indicate that more than a million smartphones are at risk

. <- ad injection: random ->

In July, Android users were in the panic with Stagefright, considered the worst security breach in the history of the operating system launched by Google.

Now, says the security company Zimperium, is circulating the Stagefright 2, the new technique to exploit a vulnerability in Android devices

. <- ad injection: random ->

According to the report of Zimperium released later this week, the security flaw allows a hacker access and remotely control the code in almost all Android devices, starting with version 1.0 of the operating system (released in 2008) and ending at 5.1.1, the latest 5.1.1

<- ad injection.!: random ->

The problem is the way Android handles the media files such as MP3 popular (audio) and MP4 (audio-visual) that can fool the device so that it go to sites with malicious content <. /> p>

And the worst of it all, also warned the company, is that you can do nothing and still have the compromised machine: just to receive a song by an app (such as Whatsapp) that decodes the immediate metadata (to present the ‘preview’ of what was received).

The vulnerability is housed in the file library ‘Libutills’, available in versions prior Android to Lollipop (5.0), but is capable to act jointly with the security flaw found in the library ‘Stagefright’, which gave rise (and name) technological panic of the year.

The Stagefright, described as “the worst Android Vulnerability all times “, forced major market rivals to join forces:. Google, Samsung and LG have committed to providing a security update every month

It is estimated that the Stagefright 2 put more than one million risk on smartphones. Google will provide a fix to October 5.

LikeTweet

No comments:

Post a Comment