Open Handset Alliance Android Browser Remote Code Execution Vulnerability

Release date:
Updated on:

Affected Systems:
Open Handset Alliance Android 2.2
Description:
--------------------------------------------------------------------------------
Bugtraq id: 52177

Android is a project launched by Google through Open Handset Alliance. It is used to provide a complete set of software for mobile devices, including operating systems and middleware.

Open Handset Alliance has a remote code execution vulnerability. Remote attackers can exploit this vulnerability to execute arbitrary code and completely control the device.

<* Source: CrowdStrike

Link: http://www.reuters.com/article/2012/02/24/us-google-android-security-idUSTRE81N1T120120224
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Open Handset Alliance
---------------------
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:

Http://www.openhandsetalliance.com/android_overview.html