Stagefright 2.0 is Here and Every Android Device Could be Vulnerable



/ 3 years ago

stagefright 2.0

Stagefright 2.0, the long-awaited sequel to August’s devastating Android vulnerability, is here, and this time every device with an Android operating system could be at risk. This new iteration of Stagefright exploits how Android reads MP3 and MP4 files to install malware on the device.

While Stagefright 2.0 definitely affects devices running Android 5.0 Lollipop and above, the Zimperium researchers that discovered the new exploit thinks that older Android operating systems could also “be impacted”.

According to Zimperium:

The vulnerability lies in the processing of metadata within the files, so merely previewing the song or video would trigger the issue. Since the primary attack vector of MMS has been removed in newer versions of Google’s Hangouts and Messenger apps, the likely attack vector would be via the Web browser.

  1. An attacker would try to convince an unsuspecting user to visit a URL pointing at an attacker controlled Web site (e.g., mobile spear-phishing or malicious ad campaign).
  2. An attacker on the same network could inject the exploit using common traffic interception techniques (MITM) to unencrypted network traffic destined for the browser.
  3. 3rd party apps (Media Players, Instant Messengers, etc.) that are using the vulnerable library.

Zimperium has brought the issue to the attention of Google’s Android Security Team, which has assigned it the code CVE-2015-6602 and is working on a solution, scheduled for release next week.

Thank you ZDNet for providing us with this information.

Topics: , , ,

Support eTeknix.com

By supporting eTeknix, you help us grow. And continue to bring you the latest news, reviews, and competitions. Follow us on Facebook and Twitter to keep up with the latest technology. Share your favourite articles, chat with the team and more. Also check out eTeknix YouTube, where you'll find our latest video reviews, event coverage and features in 4K!
eTeknix FacebookeTeknix TwittereTeknix Instagram

Check out our Latest Video

Speak Your Mind

Tell us what you're thinking...
and oh, if you want a pic to show with your comment, go get a gravatar!


Optimized with PageSpeed Ninja