Android security vulnerability has been fixed, patch sent out to OEMs

Status
Not open for further replies.

WinAndLinuxTutorials

Level 4
Thread author
Verified
Honorary Member
Aug 23, 2011
2,291
167
277
27
Jordan
youtube.com
It was recently discovered that Android has had a major security hole since version 1.6, which allowed hackers to modify almost any Play Store app and turn it malicious without tripping the built-in security measures. Well, that hole has already been plugged and the fix has been sent out to OEMs (Google was made aware of the issue in February, so it has had time to fix it).

Read More: http://blog.gsmarena.com/android-security-vulnerability-has-been-fixed-patch-sent-out-partners-some-phones-already-have-it/




Glad to see it fixed. It's also nice to see CyanogenMod releasing the fix too. :cool:
 
There is a problem posting in the news forum. So I decided to post it here. :D




It was recently discovered that Android has had a major security hole since version 1.6, which allowed hackers to modify almost any Play Store app and turn it malicious without tripping the built-in security measures. Well, that hole has already been plugged and the fix has been sent out to OEMs (Google was made aware of the issue in February, so it has had time to fix it).

Read More: http://blog.gsmarena.com/android-security-vulnerability-has-been-fixed-patch-sent-out-partners-some-phones-already-have-it/




Glad to see it fixed. It's also nice to see CyanogenMod releasing the fix too. :cool:
 
MalwareVirus said:
Thanks for info,at the last they fixed it glad to know as i have android 2.3.3.

No, you have to wait until you get the updates from the manufacturer :D, unless you are using a Nexus. In the meantime don't install anything from outside the Play store.
 
WinAndLinuxTutorials said:
It was recently discovered that Android has had a major security hole since version 1.6, which allowed hackers to modify almost any Play Store app and turn it malicious without tripping the built-in security measures. Well, that hole has already been plugged and the fix has been sent out to OEMs (Google was made aware of the issue in February, so it has had time to fix it).
But why google was unaware of this hole before ? android is playing major role for google so i think there was vulnerability management issues with android that is why it was hacked but anyhow it is good news that google found the bug in android.hope every thing will be good with android in future :)
 
sohaibraja said:
But why google was unaware of this hole before ? android is playing major role for google so i think there was vulnerability management issues with android that is why it was hacked but anyhow it is good news that google found the bug in android.hope every thing will be good with android in future :)

Nothing is 100% safe, so I do think that something like this will happen again.
 
@WinAndLinuxTutorials
Yes you are right, I find this scanner for this flaw ,untill i install the update ;)
https://play.google.com/store/apps/details?id=com.bluebox.labs.onerootscanner
scanner1.png


Source.
 
[split] Remote Code Execution Vulnerability Patched in F-Secure Antivirus

But why google was unaware of this hole before ? android is playing major role for google so i think there was vulnerability management issues with android that is why it was hacked but anyhow it is good news that google found the bug in android.hope every thing will be good with android in future :)
 
From what I understand, this vulnerability was only recently discovered and affects Android 1.6 and up.
 
Status
Not open for further replies.