| Home : December 30 2012 Computer News : Samsung still needs to plug hole in Android devices |
|
Samsung still needs to plug hole in Android devices |
December 30, 2012
Samsung is apparently still working on an update for a software flaw that could allow attackers to siphon personal data from a phone.
The vulnerability affects Samsung's S II and S III phones and several models of its Galaxy line, including the Note, Note II, Note Plus and Note 10.1, all of which use the Korean company's Exynos 4210 and 4412 model processors.
Exploit shared
The flaw and an exploit was disclosed in mid-December on XDA Developers, a forum for mobile developers. Samsung's engineers apparently made a poor configuration mistake involving the Android kernel and failed to restrict kernel address space mapped to userspace via the /dev/exynos-mem device driver.
An application incorporating the exploit was created by a developer nicknamed Chainfire on the forum.
To read this article in full or to leave a comment, please click here
Link: http://www.pcworld.com/article/2023265/samsung-still-needs-to-plug-hole-in-android-devices.html
|
|
|
|
|
