Google fixes 28 more security issues in Android
Exploiting the Stagefright 2.0 bug has become even more difficult, as the popular company is pushing fixes for this vulnerability to Android , all as part of its monthly security bulletin.
The Stagefright 2.0 , discovered by Zimperium in August and disclosed to the public last week, affects nearly all Android devices sold since 2008.
The vulnerability can be exploited with malformed MP3 and MP4 files and crash Android devices via mobile Web browsers and IM applications, giving control to attackers, just like in the first case of Stagefright that "worked" via MMS messages.
The two bugs that make up Stagefright 2.0 (CVE-2015-3876 & CVE-2015-6602) have now been officially patched by Google, according to the company's announcement yesterday via the Nexus Security Bulletin for October 2015.
While these patches are automatically pushed to all Google Nexus devices, it is up to other carriers to push the fixes to their customers. None of these vulnerabilities have been found to be exploited in the wild.
Unlike the first batch of security updates, which included fixes for vulnerabilities that were exploited “in the wild” by hackers, none of the issues fixed in yesterday's bulletin have been used in real attacks, according to the major company.
