Address randomization defense does not protect against stagefright exploits

http://arstechnica.com/security/2015/09/googles-own-researchers-challenge-key-android-security-talking-point/

by gtufano • 11 years ago

42 4 11 years ago

Spellman• 11 years ago

In a related concept, what is a reliable way of checking whether your phone has the patches? Recently I got an update to my Moto X 2nd Gen to Version 23.16.5.en.US (Verizon carrier) which takes me to Lollipop 5.1. But most lists I see about patches and which phones are fixed are from back in August.

whoopdedo• 11 years ago

Zimperium, the white hats who discovered the problem, has an app the check if your OS is vulnerable.

https://play.google.com/store/apps/details?id=com.zimperium....

I think it's fair to assume anyone getting updates in the last two months has been patched. Samsung even (partially) fixed it in the two-year old S3.

discreditable• 11 years ago

It's still not completely fixed on my Samsung Galaxy S 5. According to that app I'm open to CVE-2015-3864, which doesn't seem to have any details [1].

1. https://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2015-38...

Address randomization defense does not protect against stagefright exploits

Related Stories