Samsung Galaxy s iii memory corruption and Sandbox Bypass Vulnerability

Release date:
Updated on:

Affected Systems:
Samsung Galaxy S III
Description:
--------------------------------------------------------------------------------
Samsung Galaxy S is a smartphone of Samsung's Android system.

Samsung Galaxy s iii running Android v4.0.4 has a security vulnerability that can be exploited by malicious users to control the affected devices. Malware must be installed for successful exploitation.

1) when processing certain files, there is an error in the document browser, which can be exploited to corrupt the memory.

2) unknown details can be exploited to bypass the application sandbox and execute arbitrary code as ROOT.

<* Source: MWR InfoSecurity

Link: http://secunia.com/advisories/50914/
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Samsung
-------
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:

Http://www.samsung.com/