Samsung Galaxy S4 SMS Spoofing Vulnerability

Release date:
Updated on: 2013-06-27

Affected Systems:
Samsung Galaxy S4
Samsung Galaxy S4
Description:
--------------------------------------------------------------------------------
Bugtraq id: 60756
 
Samsung Galaxy S is a smartphone of Samsung's Android system.
 
Samsung Galaxy S4 has the SMS spoofing vulnerability in the Cloud Backup function. Attackers can exploit this vulnerability to initiate phishing attacks by sending specially crafted SMS messages to affected devices.
 
<* Source: Qihoo 360 Security Center

Link: http://osvdb.org/94520
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:
 
Samsung
-------
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:
 
Http://www.samsung.com/us/guide-to-galaxy-smart-devices/galaxy-s-4-smartphone.html? Cid = ppc