Sunday, December 1, 2013

[Nexus line is vulnerable to DoS attacks via SMS] - Xpert Mobile

The problem is that when a Nexus receives an SMS Flash, it displays this message more than any other active screen, in a semi-transparent black background that fits the color of the background screen window. If the Flash SMS is not closed and you get another, both on the screen accumulate, further increasing the effect of self-tuning the messages.

It turns out that these messages do not emit beeps, even if this option is enabled for SMS “normal”. So while you do not verify your phone, SMS Flash accumulate on the screen. When the user receives a number of 30 such messages, the machine locks up and starts behaving strangely. In most cases, it restarts. So if you need the PIN to unlock the SIM card, you will be disconnected for some time without realizing it, since the Nexus suffered an outage due to a DoS attack. Other behaviors were observed, but on a smaller scale. for example, in some cases the internet connection was blocked completely, only being restored by resetting the phone. In even rarer cases, only the messaging application suffered a crash, but the operating system is instructed to solve the problem. But, as mentioned, these are rare cases happen.

Bogdan claims to have discovered this flaw for about a year but not released before it was testing in several other models of phones, to verify the extent of this error. And after testing more than 20 different models, only the Nexus line were affected. He has contacted Google several times but only received automated responses. Hopefully the Giant Mountain View resolve this flaw ASAP.

No comments:

Post a Comment