Summaryinfo

A vulnerability categorized as problematic has been discovered in Google Android 4.2/4.4 on Nexus. This issue affects some unknown processing of the component Flash Message Handler. The manipulation results in denial of service. Furthermore, there is an exploit available.

Detailsinfo

A vulnerability, which was classified as critical, was found in Google Android 4.2/4.4 on Nexus (Smartphone Operating System). Affected is an unknown functionality of the component Flash Message Handler. The manipulation with an unknown input leads to a denial of service vulnerability. CWE is classifying the issue as CWE-404. The product does not release or incorrectly releases a resource before it is made available for re-use. This is going to have an impact on availability.

The weakness was shared 11/29/2013 by Bogdan Alecu as SMS Vulnerability In Nexus Phones Can Be Exploited To Force A Reboot Or Kill Cellular Connectivity as not defined advisory (Website). The advisory is available at androidpolice.com. The vendor was not involved in the coordination of the public release. The exploitability is told to be easy. It is possible to launch the attack remotely. The exploitation doesn't require any form of authentication. Technical details are unknown but a public exploit is available. The advisory points out:

The method of attack simply relies on sending a series of Class 0 "Flash" messages to the target phone. Flash messages are typically used for emergency or security purposes, appearing on the screen immediately instead of going to the default SMS application. When such a message arrives, no sounds are made but the background is dimmed and a single dialog box appears on top. Once 20-30 messages pile up, assuming the user isn't clearing them, it overloads the system and leads to a few potential side-effects. Most commonly, the result is an unresponsive device or an immediate reboot, but the Messages app or cellular radio may occasionally crash or freeze up in some instances.

After immediately, there has been an exploit disclosed. The exploit is shared for download at vimeo.com. It is declared as proof-of-concept. As 0-day the estimated underground price was around $25k-$100k.

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the vulnerability database at OSVDB (100409†). Further details are available at theregister.co.uk. VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Type

• Smartphone Operating System

Vendor

• Google

Name

• Android

Version

• 4.2
• 4.4

License

• free

Website

• Vendor: https://www.google.com/

CPE 2.3info

• 🔍
• 🔍

CPE 2.2info

• 🔍
• 🔍

Video

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

Discussion