A single song could be used to exploit more than a billion Android phones

A new ‘Stagefright’ vulnerability uncovered by security researchers at Zimperium zLabs could compromise your Android phone just by opening an MP3 file. One of the new exploits reportedly affects every device from version 1.0, which was released in 2008, and the other impacts devices running 5.0 and above. The attack is related to the processing of metadata within a MP3 or  MP4 video file. Previewing a specially crafted song or video would execute the exploit, which would allow an attacker to execute remote code. It also affects third-party apps, as the bug is found within the libstagefright library leveraged by some media players. The exploit has…

This story continues at The Next Web

from The Next Web » Insider http://ift.tt/1YQXiLv
via IFTTT