#What is stage fright vulnerability Patch
#What is stage fright vulnerability android

#What is stage fright vulnerability Patch

The time it may take to patch such a bug, he said, leaves a window for hackers to seize the hole. Wysopal suggested that Google may need to deploy a blanket solution.

#What is stage fright vulnerability android

Other security analysts suggest that iterations older than Jelly Bean version 4.2, which typically run on low-end Android devices, are more vulnerable since they lack much of the security infrastructure built into the later versions. Security flaws, like Stagefright, are particularly frustrating for Google, since it needs to rely on partnering telcos and handset-makers, who are often slower on the uptake.Дrake, the researcher, wrote that the Stagefright bug affects Android versions 2.2 and above. While Android has attempted to exert more control on the hardware in recent years, it still must manage many moving parts at once. Apple has faced similar vulnerabilities in the past, but has staved them off recently through its tighter grip on the OS, said Wysopal. Unlike Apple, Android pushes out its updates to device manufacturers, who are then obliged to implement them. ItвЂ™s those multitudinous partners that leave Android particularly vulnerable. вЂњThe security of Android users is extremely important to us and so we responded quickly, and patches have already been provided to partners that can be applied to any device.вЂќ вЂњWe thank Joshua Drake for his contributions,вЂќ a Google spokeswoman said in a statement. It does not appear that any Android devices have suffered the hack as of yet. Google confirmed the flawвЂ™s existence, and said it has notified its hardware and telecom partners. вЂњItвЂ™s sort of the Holy Grail of attacks on phones, where thereвЂ™s no user interaction.вЂќ вЂњThis is a Heartbleed for mobile,вЂќ said Chris Wysopal, the CTO of Veracode, referencing the formidable security bug that surfaced last year. And for Google, fixing it largely falls outside its control.

ItвЂ™s a particularly malicious hack because it can compromise the device quietly, unbeknownst to its owner. The bug, dubbed вЂњStagefright,вЂќ houses the вЂњthe worst Android vulnerabilities discovered to date,вЂќ the company wrote. This frailty was demonstrated on Monday when Joshua Drake, a researcher with security firm Zimperium, revealed a hole in AndroidвЂ™s source code that hackers can exploit with profound ease: If they have a phoneвЂ™s number, all they do is send a text. Openness is AndroidвЂ™s greatest strength - a flexibility that has enabled it to spread to now power four of every five smartphones on the planet.Д«ut openness can be, at times, its greatest weakness.