Open Handset Alliance Android SMS Remote Denial Of Service Vulnerability

Bugtraq ID:	35886
Class:	Unknown
CVE:	CVE-2009-2656 CVE-2009-2999
Remote:	Yes
Local:	No
Published:	Jul 30 2009 12:00AM
Updated:	Nov 02 2009 09:17PM
Credit:	Collin Mulliner and Charlie Miller
Vulnerable:	Open Handset Alliance Android Change 8815 Open Handset Alliance Android 1.5 CRCxx Open Handset Alliance Android 1.5 CRBxx Open Handset Alliance Android 1.5 CRB-43 Open Handset Alliance Android 1.5 CRB-42 Open Handset Alliance Android 1.5 COCxx Open Handset Alliance Android 1.5 CBDxx Open Handset Alliance Android 1.5 Open Handset Alliance Android 1.0 Open Handset Alliance Android 0
Not Vulnerable:

Open Handset Alliance Android SMS Remote Denial Of Service Vulnerability

Open Handset Alliance Android is prone to a denial-of-service vulnerability.

Attackers can exploit this issue to disconnect devices from the network. Repeated attacks may result in a prolonged denial-of-service condition.

Open Handset Alliance Android SMS Remote Denial Of Service Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Open Handset Alliance Android SMS Remote Denial Of Service Vulnerability

Solution:
Updates are available. Please see the references for details.

Open Handset Alliance Android SMS Remote Denial Of Service Vulnerability

References:

• #2009-014 Android denial-of-service issues (oCERT Advisories)
  
• AI 150264: DO NOT MERGE TO DONUT (John Huang)
  
• Android Homepage (Open Handset Alliance)
  
• Fuzzing the Phone in your Phone (Collin Mulliner and Charlie Miller)