As a result, those with older Android devices may want to be careful or think about a new handset, lest they remain vulnerable to this exploit if it enters the wild. Additionally, the attack needs to be tailored to a specific set of Android hardware, so it is likely that only those running the most popular devices would be targeted for the attack, as well as many of them having already received patches specifically to defend against Stagefright. There are over 24 critical CVEs between Stagefright 1 and Stagefright 2.

Once the scan is complete, tap the contact us link, and you'll be directed to the Zimperium website, where you.

Heres where it stands now and how users can protect their devices. While this attack may pose a threat to the 275 million Android phones running versions 2.2 all the way to 5.1, devices that are running the most up-to-date version, 6.0 Marshmallow are safe. Stagefright is a vulnerability that can be exploited via 11+ attack vectors and allows remote code execution exploiting several critical vulnerabilities in the Android Media Library. &0183 &32 Stagefright is a vulnerability that can allow attackers to steal information from Android. The Stagefright Detector reporting the vulnerability on a Verizon-branded Nexus 6. &0183 &32 The Stagefright vulnerability on Android phones was one of the top security stories of 2015. Unfortunately for fans of stock Android, the attack was found to be most effectual on Nexus 5 devices running their stock firmware, but the customized versions of Android found on phones from HTC, LG and Samsung are not safe. The procedure may seem long and complicated, but in reality, Metaphor was found to be able to break into most devices within 20 seconds. When a victim visits a website that has a malicious MPEG-4 file embedded in it, it will cause Android’s built-in media server to crash, and send data on the device’s hardware to the attacker, it will then send another video file, capture additional data and finally deliver a video file that is able to compromise the device. The Metaphor exploit uses a set of back-and-forth communications that allow attackers to probe the defenses of a target device before attempting the compromise. The Stagefright vulnerability in Android is nothing new, however for a long time it was (mostly) harmless due to difficulties in reliably using the flaw for malicious purposes Unfortunately for Google and Android users, researchers at Isreali cyber-security firm NorthBit have developed a proof-of-concept exploit, named Metaphor, based on Stagefright that is able to reliably compromise Android devices.

What is stagefright vulnerability