| Google Android Under Attack |
|
|
|
| Written by Editor |
| Tuesday, 28 October 2008 13:44 |
|
Well it has been out just a few weeks and now the Google G1 mobile phone aka. Android has started to come under scrutiny by the Security community. Alas it isn’t fairing well, already researchers have discovered a flaw within the browser on the platform that could lead to compromise of the device. The security issue is a buffer-overflow in the browser identified by researchers from Independent Security Evaluators, the blame the problem on Google's use of old open-source packages. They haven’t released details of the specific package as to avoid it becoming the target for would be attackers of the new platform. The issue can be exploited using a specially crafted web page that could allow the attacker to execute arbitrary code in the user context of the web browser. The scope for the compromise is limited due to the layered nature of the security within the Android platform, however the attack could allow the compromise of any information the browser may use. You can see more about the work by ISE here. |













