11:55
Unknown
Google is now investigating a reported vulnerability that may allow attackers to hit its Nexus mobile phones with a denial-of-service attack via a special text message.
"We thank (researcher Bogdan Alecu) for bringing the possible issue to our attention and we are investigating," PC World quoted a Google representative as saying via email.
It said Alecu, a system administrator at Dutch IT services company Levi9, discovered the flaw.
The PC World report said the issue appeared to affect Android 4.x firmware versions on Google Galaxy Nexus, Nexus 4 and Nexus 5.
Alecu presented the vulnerability Friday at the DefCamp security conference in Bucharest, Romania.
The SMS in question is a Class 0 or Flash SMS, which is displayed directly on the phone's screen and does not automatically get stored on the device.
When such a message is received on Google Nexus phones, the message is displayed on top of all active windows and is surrounded by a semi-transparent black overlay.
If the message is not saved or dismissed, and a second message is received, the second message is placed on top of the first one and the dimming effect increases.
"When such messages are received, there is no audio notification, even if one is configured for regular incoming SMS messages. This means that users receiving Flash messages won't know about them until they look at the phone," PC World said.
On Nexus devices, Alecu found that if a large number of Flash messages, about 30, are received and are not dismissed, the Nexus devices "act in unusual ways."
He said the phone usually reboots or the phone may not connect to the network after the reboot.
During this time the phone cannot make or receive calls or messages that need a mobile network connection.
"On other rare occasions, only the messaging app crashes, but the system automatically restarts it, so there is no long term impact," PC World said.
Alecu said he discovered this DoS issue over a year ago and has tested it on Google Galaxy Nexus, Nexus 4 and Nexus 5 phones. — TJD, GMA News
via Technology - Google News http://news.google.com/news/url?sa=t&fd=R&usg=AFQjCNHYC_pDk7GKu6WQTINj5awzFybI9g&url=http://www.gmanetwork.com/news/story/337971/scitech/technology/google-looking-into-ddos-bug-in-nexus-phones
Put the internet to work for you.
Posted in: Tablets 4 Kids
0 comments:
Post a Comment