Android 4.4 vulnerabilities remote Remote Control of mobile phones

In the Android system, the Master Key vulnerability is the most common one. Hackers can use this vulnerability to remotely control users' Android systems and their devices. In previous versions of Android, the Master Key vulnerability has appeared. Now, a new variant vulnerability appears in the latest Android 4.4 KitKat operating system, which is also a very serious Mater Key vulnerability.

In March July this year, the Bluebox security organization said it had discovered an Android system vulnerability, and almost 99% of Android devices may be affected. This vulnerability allows Android users to bypass program verification and malicious code detection when installing applications, android devices in users' hands are allowed to install applications that have been maliciously modified by the vulnerability without encrypted signatures. Although Google (Weibo) has always said that the vulnerability has been fixed, it does not know whether major manufacturers and operators immediately push vulnerability patches to users' mobile phones for updates.

Saurik, A Cydia developer at the iOS platform jailbreak app store and a security program developer at the Android system, said that the same Master Key vulnerability exists in the Android 4.4 KitKat operating system. Although this vulnerability does not seem as serious as the previous version, it is still sufficient to be exploited by hackers to cause losses. Saurik provides a detailed vulnerability Error Analysis and malicious demonstration application. This demonstration Application can be easily installed to the Android system through the vulnerability. At the same time, Saurik immediately updates the patch for fixing the vulnerability to its Cydia application for upgrade and installs the patch to its own system.

Although the Mater Key vulnerability of Android 4.4 KitKat can be fixed through patches, the patch update scope is still affected by carriers and vendors. Maybe Google's Nexus devices can be pushed from the installation and update of OTA in the first time, but because the manufacturers and operators have made in-depth customization and modifications to the Android system, therefore, when other non-Nexus Android smartphones can fix the vulnerability, it depends on the event arrangements of different vendors and carriers.

Recommended reading:

The sms api interface is available for Android 4.4, and third-party applications are welcome in the spring

"Android 4.4" out-of-the-box illustration