
“Fresh from sorting out the Stagefright flaw, Google has another serious security vulnerability in Android on its hands. A privilege escalation hole allows normal apps to gain superpowers to snoop on a device’s owner, smuggle in malware, and wreak other havoc. The vulnerability, CVE-2015-3825, affects about 55 per cent of Android handsets – basically version 4.3 and above, as well as the current build of Android M. Flaws in the OpenSSLX509Certificate class in Android can be exploited by an app to compromise the system_server process – and gain powerful system-level access on the device.”
http://www.theregister.co.uk/2015/08/10/another_android_flaw_hitting_55_percent_handsets/
Related posts:
Our Laws Make those of Medieval England Seem Reasonable
Syrians In Ghouta Claim Saudi-Supplied Rebels Behind Chemical Attack
The Expendables: The Temps Who Power Corporate Giants
Boulder DA Stops Marijuana Possession Prosecutions
What's the Deal with Bitcoins Anyway?
Japan secretly funneled hundreds of millions to the NSA, breaking its own laws
Here’s what war with North Korea would look like
Native American Student Denied High School Diploma For Wearing Tribal Feather
Military Police Officers Sit, Join Protesters In Brazil
Ron Paul: Mr. President, fire Jeff Sessions
Leaked report: Nearly half of US drone strikes in Pakistan not against al-Qaeda
Seattle Mayor Orders Police to Dismantle Its Drone Program After Protests
Burn Pits’ Legacy: ‘Delay, Deny, Hope They Die’
BATFE Confirms: All Gun Owners Subject to Arrest in Cars
7 Years of Work on Food Forest Destroyed Over Permit