Samsung to fix Android device vulnerability
The flaw, which could allow access to the entire memory of a device, affects a range of Samsung devices
IDG News Service - Samsung said Wednesday it is working on an update for a software flaw that could allow attackers to siphon personal data from a phone.
The vulnerability affects Samsung's S2 and S3 phones and several models of its Galaxy line, including the Note, Note II, Note Plus and Note 10.1, all of which use the Korean company's Exynos 4210 and 4412 model processors.
The flaw and an exploit was disclosed on Sunday on XDA Developers, a forum for mobile developers. Samsung's engineers apparently made a poor configuration mistake involving the Android kernel and failed to restrict kernel address space mapped to userspace via the /dev/exynos-mem device driver.
An application incorporating the exploit was created by a developer nicknamed Chainfire on the forum.
Chainfire's application allows users to modify the phone to make the exploit ineffective, but the fix also disables a device's camera in some instances depending on the device's firmware version.
Chainfire warned that other application-based fixes that have been developed are seriously flawed, so users should not depend on those to provide protection until Samsung issues an update.
"The only true solution is a kernel fix that simply removes the exploitable memory device, but that requires a non-universal device update," Chainfire wrote.
Samsung downplayed the seriousness of the issue, saying in a statement that "the issue may arise only when a malicious application is operated on the affected devices; however, this does not affect most devices operating credible and authenticated applications."
Samsung's devices can be updated over the air by operators, or users can do it with a desktop computer using the company's Kies software, according to a spokesman.
Android applications submitted to Google's Play store are checked for malicious behavior, but there are many websites around the Internet offering Android applications, many of which purport to be a legitimate but are actually malicious software and could incorporate this exploit.
Since an exploit has been published, Trend Micro said on Wednesday that it is only a matter of time before hackers begin to use it. Samsung said it "will continue to closely monitor the situation until the software fix has been made available to all affected mobile devices." It did not specify when the fix would be available.
Send news tips and comments to email@example.com. Follow me on Twitter: @jeremy_kirk
- 15 Non-Certified IT Skills Growing in Demand
- How 19 Tech Titans Target Healthcare
- Twitter Suffering From Growing Pains (and Facebook Comparisons)
- Agile Comes to Data Integration
- Slideshow: 7 security mistakes people make with their mobile device
- iOS vs. Android: Which is more secure?
- 11 sure signs you've been hacked
- The Threat Landscape Hardly a day goes by without the discovery of a new cyberthreat somewhere in the world! But how do you keep up with...
- Security for Virtualization In the rush to implement virtualization, security has become second. So while the business benefits are clear, the risks are less well documented...
- Pay-as-you-Grow Data Protection: IBM Tivoli's Full-featured Data Protection Suite for Small to Medium Businesses IBM Tivoli Storage Manager Suite for Unified Recovery gives small and medium businesses the opportunity to start out with only the individual solutions...
- Streamline Data Protection with IBM Tivoli Storage Manager Operations Center IBM Tivoli Storage Manager (TSM) has been an industry-standard data protection solution for two decades. But, where most competitors focus exclusively on Backup...
- Meg Whitman presents Unlocking IT with Big Data During this Web Event you will hear Meg Whitman, President and CEO, HP discuss HAVEn - the #1 Big Data platform, as well...
- The New Way to Work Knowledge Vault This Knowledge Vault focuses on how, in today's increasingly virtual world, it's more important than ever to engage deeply with employees, suppliers, partners,... All Malware and Vulnerabilities White Papers | Webcasts