Open Handset Alliance Malformed Application Remote Denial Of Service Vulnerability

Bugtraq ID:	36590
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Oct 05 2009 12:00AM
Updated:	Oct 06 2009 04:09PM
Credit:	Emmanouel Kellinis
Vulnerable:	Open Handset Alliance Android Change 8815 Open Handset Alliance Android 1.5 CRCxx Open Handset Alliance Android 1.5 CRBxx Open Handset Alliance Android 1.5 CRB-43 Open Handset Alliance Android 1.5 CRB-42 Open Handset Alliance Android 1.5 COCxx Open Handset Alliance Android 1.5 CBDxx Open Handset Alliance Android 1.5 Open Handset Alliance Android 1.0 Open Handset Alliance Android 0
Not Vulnerable:	Open Handset Alliance Android Donut DRC79

Open Handset Alliance Malformed Application Remote Denial Of Service Vulnerability

Open Handset Alliance Android is prone to a denial-of-service vulnerability.

Attackers can exploit this issue to cause a vulnerable device to crash and restart, denying service to legitimate users.

Open Handset Alliance Malformed Application Remote Denial Of Service Vulnerability

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Open Handset Alliance Malformed Application Remote Denial Of Service Vulnerability

Solution:
Updates are available. Please see the references for details.

Open Handset Alliance Malformed Application Remote Denial Of Service Vulnerability

References:

• Android Homepage (Open Handset Alliance)
  
• Fuzzing the Phone in your Phone (Collin Mulliner and Charlie Miller)
  
• [oCERT-2009-014] Android denial-of-service issues (Andrea Barisani )