Thread Rating:
  • 0 Vote(s) - 0 Average
  • 1
  • 2
  • 3
  • 4
  • 5
General News Chrome Exploit Allegedly Gives Root Access to Virtually Any Android Device

A critical vulnerability in Chrome for Android has been reported that makes it possible for attackers to take over a device. The vulnerability was demonstrated at the MobilePwn2Own, PacSec conference in Tokyo. The researcher believes that the vulnerability affects all versions of Android capable of running the latest version of Chrome.

Qihoo 360 researcher Guang Gong showcased the exploit. The vulnerability resides in JavaScript v8, Google's open source JavaScript engine. For the vulnerability to be exploited, users needs to be tricked to visit a malicious website using Chrome Web browser.

An attacker is then able to install an arbitrary application and gain the full privileges of the device. He noted that the attack was "one shot exploit," essentially meaning that just one vulnerability was enough to perform the attack. The exploit worked on many other devices as well, said Dragos Ruiu, the organiser of PacSec.

"The impressive thing about Guang's exploit is that it was one shot; most people these days have to exploit several vulnerabilities to get privileged access and load software without interaction," Ruiu toldVulture South.

"As soon as the phone accessed the website the JavaScript v8 vulnerability in Chrome was used to install an arbitrary application (in this case a BMX Bike game) without any user interaction to demonstrate complete control of the phone."

Working details of the vulnerability haven't been disclosed, and Ruiu said that Google had been made aware of the vulnerability.

At the same event, two security researchers managed to trick the Samsung Galaxy S6Galaxy S6 Edge, and the Galaxy Note 4 to connect to a compromised base station and had the calls and messages go through it. As a result of which, a victim's calls and messages could be intercepted.

Airtel Digital HD Recorder / Kerala Vision Digital TV
Thanks given by:

Possibly Related Threads...
Thread Author Replies Views Last Post
  General News: Gmail for iOS, Android Gets New Material Theme: Everything Need to Know nairrk 0 465 02-01-2019, 09:17 AM
Last Post: nairrk
  General News: WhatsApp beta for Android: Here is how you can send private reply to a group member nairrk 0 519 11-03-2018, 12:04 PM
Last Post: nairrk
  General News: WhatsApp is rolling out Stickers support for Android, iOS and web nairrk 0 354 10-25-2018, 10:49 AM
Last Post: nairrk
  General News: Google Chrome 70 is rolling out for Windows, Mac, and Linux.. nairrk 0 317 10-18-2018, 06:39 PM
Last Post: nairrk
  General News: WhatsApp Picture-in-Picture (PIP) mode available to all Android beta users today nairrk 0 330 10-03-2018, 03:19 PM
Last Post: nairrk
  General News: JioPhone, JioPhone 2 users get WhatsApp access nairrk 0 315 09-11-2018, 09:08 AM
Last Post: nairrk
  General News: Google's Gboard gets custom 'Mini' selfie emoji sticker option on Android and iOS nairrk 0 324 08-29-2018, 07:28 AM
Last Post: nairrk
  Breaking News: Xiaomi is looking for beta testers for Mi A2 in India, possibly for Android 9 Pie Rajnarayan 0 355 08-23-2018, 02:36 PM
Last Post: Rajnarayan
  General News: Google Chrome will soon help you browse the web faster, here’s how nairrk 0 296 08-17-2018, 05:48 PM
Last Post: nairrk
  General News: Google Android P launched, P stands for Pie nairrk 0 305 08-07-2018, 01:03 PM
Last Post: nairrk

Forum Jump:

Users browsing this thread: 1 Guest(s)