Samsung Galaxy S3 lock screen Security Bypass Vulnerability

Release date:
Updated on: 2013-02-26

Affected Systems:
Samsung Galaxy S3 3.0.31-742798
Description:
--------------------------------------------------------------------------------
Bugtraq id: 58123
 
Samsung Galaxy S is a smartphone of Samsung's Android system.
 
All Samsung devices that allow emergency calls and enable the S-Voice function may have security vulnerabilities. After you lock the screen and set the PIN, you can use the S-Voice function on Samsung S3 to bypass the access control of the PIN code to execute any function of the mobile phone. You can also use S-Voice to send any command, this vulnerability may cause information leakage.
 
<* Source: Vulnerability Research Team

Link: http://cxsecurity.com/issue/WLB-2013020165
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:
 
Samsung
-------
Currently, the vendor does not provide patches or upgrade programs. We recommend that users who use the software follow the vendor's homepage to obtain the latest version:
 
Http://www.samsung.com/