A phone number is the only information needed to carry out the attack.
Security researchers demonstrate the bugs with a proof of concept that sends specially crafted MMS messages to the victim device and in most cases requires no end-user actions upon message reception to succeed-the user doesn't have to do anything to 'accept' exploits using the bug it happens in the background.
Exploitation of the bug allows an attacker to perform arbitrary operations on the victim's device through remote code execution and privilege escalation. The name is taken from the affected library, which among other things, is used to unpack MMS messages. Stagefright is the name given to a group of software bugs that affect versions 2.2 "Froyo" of the Android operating system.
0 kommentar(er)
