Open Handset Alliance Android Dailer Remote Denial of Service Vulnerability

Bugtraq ID:	55708
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Sep 27 2012 12:00AM
Updated:	Oct 01 2012 10:10PM
Credit:	Ravishankar Borgaonkar
Vulnerable:	Open Handset Alliance Android 2.3.5 Open Handset Alliance Android 2.3.2 Open Handset Alliance Android 2.3.1 Open Handset Alliance Android 4.0.1 Open Handset Alliance Android 3.5 Open Handset Alliance Android 3.2 Open Handset Alliance Android 3.1 Open Handset Alliance Android 3.0 Open Handset Alliance Android 2.3.7 Open Handset Alliance Android 2.3.6 Open Handset Alliance Android 2.3.4 Motorola Droid 0
Not Vulnerable:

Open Handset Alliance Android Dailer Remote Denial of Service Vulnerability

Open Handset Alliance Android is prone to a remote denial-of-service vulnerability.

Successfully exploiting this issue will allow an attacker to destroy the SIM card or cause the device to reset to factory settings, denying further service to legitimate users. Note that the factory reset can be performed only on Samsung devices by exploiting this issue.

Note: This issue was previously titled 'Samsung Galaxy S III USSD Code Remote Denial of Service Vulnerability'. The title and technical details have been changed to better reflect the underlying component affected.

Open Handset Alliance Android Dailer Remote Denial of Service Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Open Handset Alliance Android Dailer Remote Denial of Service Vulnerability

Solution:
Reportedly, the issue is fixed; however, Symantec has not confirmed this. Please contact the vendor for more information.

Open Handset Alliance Android Dailer Remote Denial of Service Vulnerability

References:

• Samsung Homepage (Samsung)