PDA

View Full Version : Security update kills several critical bugs in Android Marshmallow



Jacee
November 8th, 2015, 07:12 PM
Google's November Android security update carries fixes for seven vulnerabilities, including two remote code execution flaws that are rated "critical" (CVE-2015-6608, CVE-2015-6609), and an elevation of privilege vulnerability (CVE-2015-6610) that would also be rated as such were it not for a lower likelihood that it can be exploited remotely.

The majority of the bugs are present in Android 6.0 (Marshmallow), the latest version of the popular OS, which was officially released in October.

CVE-2015-6608 affects the mediaserver service, which is used by Android to index media files that are located on the Android device.
http://www.net-security.org/secworld.php?id=19059