New Android Vulnerability Compromises Any Handset Through Chrome

Discussion in 'Android News' started by dgstorm, Nov 13, 2015.

  1. dgstorm

    dgstorm Editor in Chief
    Staff Member Premium Member

    Joined:
    Dec 30, 2010
    Messages:
    11,016
    Likes Received:
    3,979
    Trophy Points:
    823
    Location:
    Austin, TX
    Ratings:
    +4,254
    [​IMG]

    While some of the Android vulnerabilities we have been hearing about lately were easily avoided, some are decidedly more menacing because they are easier to fall prey to. Today's reported Android security breach falls squarely in that last category. There is a new exploit that can compromise any Android smartphone through Chrome, just from visiting certain websites. This exploit allows an attacker to gain full control of the device. Here's a quote with more of the details,
    There is some bright news regarding this vulnerability. It looks like researchers may have found it so fast that the bad guys haven't even had a chance to develop and use it.

    That's one of the best things about Android. It's community of developers rally together to constantly test the boundaries and limits of the technology. It's because of them that we frequently get fixes for problems before they ever become a problem. The word on the street is that a fix for this is in the works and should be coming soon.
     
    • Like Like x 3
  2. cynkrzy

    cynkrzy Platinum Member

    Joined:
    Feb 16, 2011
    Messages:
    713
    Likes Received:
    562
    Trophy Points:
    433
    Location:
    SLO
    Ratings:
    +635
    Current Phone Model:
    SCHI605
    On the bright side it's an app, a Google app. It can be fixed and everyone can get the fix without having to wait on carriers, which we know means just about never!
     
    • Like Like x 3
    • Agree Agree x 3
  3. SquireSCA

    SquireSCA Silver Member

    Joined:
    Jan 12, 2011
    Messages:
    1,571
    Likes Received:
    226
    Trophy Points:
    108
    Location:
    Atlanta, GA
    Ratings:
    +280
    One does get tired of the constantly increasing barrage of nasty malware though...
     
    • Like Like x 2
    • Agree Agree x 2
  4. MissionImprobable

    MissionImprobable Silver Member

    Joined:
    Sep 5, 2011
    Messages:
    2,040
    Likes Received:
    142
    Trophy Points:
    128
    Ratings:
    +169
    Glad the fix is coming quickly. I never used chrome previously as it's laggy compared to Firefox on pc, and I'd usually sync between devices. Used it some recently, but one, it's not surprising that the exploit involves Java, and secondly, that's just part and parcel of using a popular OS, someone will always be looking for a way in.
     
    • Like Like x 3
    • Agree Agree x 1
  5. Mustang02

    Mustang02 Diamond Member

    Joined:
    Aug 8, 2010
    Messages:
    7,625
    Likes Received:
    5,115
    Trophy Points:
    1,563
    Location:
    Ohio
    Ratings:
    +6,073
    Current Phone Model:
    Nexus 6P/5X
    The article doesn't mention a fix coming though.
     
  6. cynkrzy

    cynkrzy Platinum Member

    Joined:
    Feb 16, 2011
    Messages:
    713
    Likes Received:
    562
    Trophy Points:
    433
    Location:
    SLO
    Ratings:
    +635
    Current Phone Model:
    SCHI605
    True - But Google has been fairly responsive to these threats. Can't imagine it will be too long
     
  7. desiwest

    desiwest New Member

    Joined:
    Nov 14, 2015
    Messages:
    1
    Likes Received:
    0
    Trophy Points:
    1
    Ratings:
    +0
    Seeing as Google had Project Zero for specifically finding vulnerabilities and forcing companies to patch their software I'm sure they already started working on a fix as soon as it was discovered.

    Sent from my D6708 using Tapatalk
     
  8. cr6

    cr6 Super Moderator
    Staff Member

    Joined:
    Apr 1, 2011
    Messages:
    8,354
    Likes Received:
    5,877
    Trophy Points:
    1,778
    Location:
    NW Rocky Mtn region
    Ratings:
    +6,707
    Current Phone Model:
    Galaxy S7 Edge
    Twitter:
    @dronewolfmedia
    True, but then again it's no different from PC malware and viruses that we've had to protect ourselves from for decades before smartphones were everywhere.

    S5 tap'n
     
    • Like Like x 1
    • Agree Agree x 1