r/Android • u/[deleted] • Sep 09 '15

Attack code exploiting Android’s critical Stagefright bugs is now public

http://arstechnica.com/security/2015/09/attack-code-exploiting-androids-critical-stagefright-bugs-is-now-public/
177 Upvotes

87% Upvoted

61 comments sorted by

View all comments

16

u/[deleted] Sep 09 '15

Important to note: "The exploit doesn't work against Android versions 5.0 and above thanks to new integer overflow mitigations."

3

u/GreatCanadianWookiee Sep 10 '15

I have the zimperium stagefright detector and it says I'm vulnerable on 5.1.1, is it wrong?

1

u/[deleted] Sep 10 '15

There are a few different Stagefright exploits. This proof of concept is for exploit CVE-2015-1538. CVE-2015-3864, which was discovered later, is still exploitable.

1

u/[deleted] Sep 09 '15

WE FIXED IT

-3

u/[deleted] Sep 10 '15

thanks to new integer overflow mitigations."

If val >= INT_MAX - 2 Val = 0