backtop


Print 9 comment(s) - last by Trisped.. on Dec 20 at 2:46 AM

Memory permissions raise danger of local attacks

Samsung Electronics Comp., Ltd. (KSC:005930) the top maker of Android smartphones in the world (or any kind of phones, for that matter), received some unwelcome news on Monday, when a developer going by the handle "alephzain" posted details on Microsoft Corp.'s (MSFT) XNA developers forum regarding memory permissions security holes in some of Samsung's top devices.

In order to give their proprietary Exynos 4 system-on-a-chip a dedicated line from the camera to the memory, Samsung opened up permissions to the on-chip DRAM.  The only issue is that it appears to have opened its memory for writing to all users.

That's good news for modders who could use it to obtain root for the purpose of installing custom builds of Android like Cyanogen.  Bu at it's bad news from a security perspective.
 
Galaxy Note II
The Galaxy Note II

The flaw appears to affect a number of top Samsung devices, including the Galaxy Note II, the Galaxy S2, and the Meizu MX.  Comments the developer who found the flaw, "The good news is we can easily obtain root on these devices and the bad is there is no control over it."

Generally to do something truly malicious with the flaw, you would have to use a trojan app equipped with memory dumping or memory injection functionality.  But given the success of past trojans against Android-rival Apple, Inc. (AAPL) the possibility of this flaw being exploited in the wild should not be ruled out.

Sources: XDA, CNET



Comments     Threshold


This article is over a month old, voting and posting comments is disabled

RE: Galaxy S3 Affected
By euclidean on 12/19/2012 10:33:45 AM , Rating: 2
The article was completely right in mentioning Apple. Not too long ago everyone* claimed Apple was free of malware/virus issues that seemed to plague Windows. While us in the Tech industries know the truth, many out there still believe that Apple is free of Malware.

So it's easy to relate/explain to the general populous in writing this article that yes, malware/viruses do exist outside of Windows, here are examples.

No matter though - I really would like someone to provide me of a Single example somewhere (maybe not even DT) that is completely unbiased towards Apple, Android, or whomever. It doesn't matter where I go, I've seen nothing but people complaining either about "This article is Biased towards Apple!" or "This article is Biased towards Android!"....Get over yourselves...


“And I don't know why [Apple is] acting like it’s superior. I don't even get it. What are they trying to say?” -- Bill Gates on the Mac ads














botimage
Copyright 2014 DailyTech LLC. - RSS Feed | Advertise | About Us | Ethics | FAQ | Terms, Conditions & Privacy Information | Kristopher Kubicki