StageFright Scanner

Aug 19, 2015

1.4 MB
Rozmiar Pliku
Android 4.0+
Android OS

O StageFright Scanner

Detector for StageFright remote code execution vulnerabilities

Stagefright is one of the most critical Android vulnerabilities so far. A successful attack could lead to remote code execution on your phone, such as accessing your SMS, payment information or Facebook messages. This vulnerability is triggered when Android is trying to display a MP4 file from MMS, email or messengers.

Trustlook’s Stagefright vulnerability scanner could help you identify and remove the “exploit files” before they have a chance to harm your phone.

Here are vulnerabilities been detected

CVE-2015-1538, P0006, Google Stagefright ‘stsc’ MP4 Atom Integer Overflow Remote Code Execution

CVE-2015-1538, P0004, Google Stagefright ‘ctts’ MP4 Atom Integer Overflow Remote Code Execution

CVE-2015-1538, P0004, Google Stagefright ‘stts’ MP4 Atom Integer Overflow Remote Code Execution

CVE-2015-1538, P0004, Google Stagefright ‘stss’ MP4 Atom Integer Overflow Remote Code Execution

CVE-2015-1539, P0007, Google Stagefright ‘esds’ MP4 Atom Integer Underflow Remote Code Execution

CVE-2015-3827, P0008, Google Stagefright ‘covr’ MP4 Atom Integer Underflow Remote Code Execution

CVE-2015-3826, P0009, Google Stagefright 3GPP Metadata Buffer Overread

CVE-2015-3828, P0010, Google Stagefright 3GPP Integer Underflow Remote Code Execution

CVE-2015-3824, P0011, Google Stagefright ‘tx3g’ MP4 Atom Integer Overflow Remote Code Execution

CVE-2015-3829, P0012, Google Stagefright ‘covr’ MP4 Atom Integer Overflow Remote Code Execution