
“Fresh from sorting out the Stagefright flaw, Google has another serious security vulnerability in Android on its hands. A privilege escalation hole allows normal apps to gain superpowers to snoop on a device’s owner, smuggle in malware, and wreak other havoc. The vulnerability, CVE-2015-3825, affects about 55 per cent of Android handsets – basically version 4.3 and above, as well as the current build of Android M. Flaws in the OpenSSLX509Certificate class in Android can be exploited by an app to compromise the system_server process – and gain powerful system-level access on the device.”
http://www.theregister.co.uk/2015/08/10/another_android_flaw_hitting_55_percent_handsets/
Related posts:
Libertarian open carry protester vs 6 police officers
IRS FBAR forms no longer accepted by postal mail
Author Behind Ransomware Tox Calls it Quits, Sells Platform
Hackers hijack 300,000-plus wireless routers, make malicious changes
Snowden Leak: U.S. Paying Contractors Ten Times as Much as Bureaucrats
After Boston: Arrest Kerry and the Neo-Cons!
In Death, as in Life, Truth About Mandela Overlooked
What Reasonable Person WOULDN'T Avoid the Cops?
New York ‘cannibal cop’ convicted of kidnapping plot
Mastercoin: A Second-Generation Protocol on the Bitcoin Blockchain
Library’s Tor relay—pulled after feds noticed—now restored
Former Mich. mayor sets bronze statue of himself outside home
US court rules that IP cloaking to access blocked sites violates CFAA law
Iowa Troopers Steal $100,000 in Poker Winnings From Two Drivers
Glenn Greenwald Vs Bush Press Sec. Ari Fleischer Over NSA's PRISM