New Metasploit module gets a shell using just a QR code; affects 70% of android devices.

From	cykros@devio.us
Newsgroups	comp.misc
Subject	New Metasploit module gets a shell using just a QR code; affects 70% of android devices.
Date	2014-02-13 21:04 +0000
Organization	A noiseless patient Spider
Message-ID	<ldjc1f$944$1@dont-email.me> (permalink)

Show all headers | View raw

cykros writes: New "WebView" exploit module for Rapid7's Metasploit
creates QR codes that, when scanned by any Android device running 
version 4.2 or earlier (70% of Android devices) return the creator 
of the QR code with a shell for remote code execution. Questions
arise as to who should be leaned on to provide a fix for this, as 
Google already has fixed the code in the most recent version of
Android.

https://community.rapid7.com/community/metasploit/blog/2014/02/13/weekly-metasploit-update?et=watches.email.blog

Back to comp.misc | Previous | Next — Next in thread | Find similar | Unroll thread

Thread

New Metasploit module gets a shell using just a QR code; affects 70% of android devices. cykros@devio.us - 2014-02-13 21:04 +0000
  Re: New Metasploit module gets a shell using just a QR code; affects 70% of android devices. RS Wood <rsw@therandymon.com> - 2014-02-14 11:12 +0000

csiph-web