Wednesday, August 5, 2015

Andriod bug that end in reboot loop.


              Android is facing worst week ever. There has been many bugs and vulnerabilities that has been targeted towards android. Recently a vulnerability has been discovered that causes endless rebooting of device.

              Few days back a researcher found a bug that exploits many Android versions and then it is Trend Micro that revealed that a vulnerability can be used to exploit the device under the name #Stagefright and now it is  a vulnerability that end in reboot ever.

              This vulnerability is assigned as #CVE-2015-3823 and it has been hit or exploited by either way as

Malicious Application or
Malicious Website.

                When the user visits a web site a download has been triggered and the malicious code will be executed that put the phone in endless rebooting.

                 The other way is by installing a malicious application and when the user clicks on the media file that is malicious (.mkv) then the device will result in endless rebooting.

                  This vulnerability works by creating a buggy "#mediaserver"  plugin and it causes the device to reboot again and again.

                    The vulnerability has been reported to Google and they have categorized it as Low-level vulnerability and no patch has been released from Google.

                     Inorder to prevent from this vulnerability the user if infected can boot their Android device in safe mode and this disables the third party applications from loading and then the user can wait until the patch has been released by Google.

P.S : The post is to create awareness and not to be misused.

No comments:

Post a Comment