Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.mobile.android > #21839

Stagefright Detector App

Path csiph.com!eternal-september.org!feeder.eternal-september.org!news.swapon.de!fu-berlin.de!uni-berlin.de!individual.net!not-for-mail
From "s|b" <me@privacy.invalid>
Newsgroups comp.mobile.android
Subject Stagefright Detector App
Date Sat, 08 Aug 2015 16:56:38 +0200
Organization XXII
Lines 18
Message-ID <d2mjktF3kkU1@mid.individual.net> (permalink)
Reply-To sb.nospam@belgacom.net
Mime-Version 1.0
Content-Type text/plain; charset=us-ascii
Content-Transfer-Encoding 7bit
X-Trace individual.net ItFHjrnGr3EEfBb8dfMebg1oVjcnOVsFPjTw1qX6hIhqlWxSGN
Cancel-Lock sha1:/Arhh78ErBhqi9ATMw6TLyJPE4c=
User-Agent ForteAgent/8.00.32.1272
X-Face j0\WO?Dcjo^V#d7Q,H$9^8N{Z|fy50vxQkToel)jNR3hmCMV8kai(fMVJ:Yk}q?t<:xHu2D )?CJ[c|zu]%I!fKb7-4~$&Mx|GT=>ux^*,A:5Cdek,y4A(DSX=oXRv7-)/AcgHiWf
Xref csiph.com comp.mobile.android:21839

Show key headers only | View raw


Stagefright Detector App - by Zimperium INC.
<https://play.google.com/store/apps/details?id=com.zimperium.stagefrightdetector>

Installed on my Samsung Galaxy S4 Mini. After analysis it shows this:
<http://oi60.tinypic.com/287qhk4.jpg>

It seems I'm still vulnerable, after disabling MMS auto video download
and auto video download in WhatsApp and Viber. (Hangouts is supposed to
be uninstalled.)

What now?

Samsung promised to have an update by the end of the month (and monthly
updates after that), but what do I do in the meantime? Can I close
CVE-2015-3827 and CVE-2015-3829?

-- 
s|b

Back to comp.mobile.android | Previous | Next — Next in thread | Find similar | Unroll thread


Thread

Stagefright Detector App "s|b" <me@privacy.invalid> - 2015-08-08 16:56 +0200
  Re: Stagefright Detector App Dave Higton <dave@davehigton.me.uk> - 2015-08-08 20:58 +0100
    Re: Stagefright Detector App Roger Mills <watt.tyler@gmail.com> - 2015-08-08 22:03 +0100

csiph-web