Android SMS Spoofing Vulnerability

Release date:
Updated on:

Affected Systems:
For Google Android 3.2
Google Android 3.1.4
For Google Android 3.0
Google Android 2.3.5
Google Android 2.3.4
Google Android 2.3.3
Google Android 2.3.2
Google Android 2.3.1
Google Android 2.2.3
Google Android 2.2.2
Google Android 2.2.1
For Google Android 2.2
For Google Android 2.1
For Google Android 1.6
Description:
--------------------------------------------------------------------------------
Bugtraq id: 56392
 
Android is a project launched by Google through Open Handset Alliance. It is used to provide a complete set of software for mobile devices, including operating systems and middleware.
 
Android v1.6 (Donut)-4.1 (Jelly Bean) has the SMS spoofing vulnerability. Attackers can exploit this vulnerability to send spoofed SMS content to victims and perform phishing attacks.
 
<* Source: Xuxian Jiang
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:
 
Google
------
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:
 
Http://www.google.com