Popular apps on Google Play linked to old remote code execution bugs

guest · Nov 21, 2019

Popular apps on Google Play linked to old remote code execution bugs
Vulnerabilities dating back to 2014 were linked to the latest versions of high-profile mobile applications, potentially unpatched
November 21, 2019
https://www.zdnet.com/article/popular-apps-on-google-play-linked-to-old-remote-code-execution-bugs/

When we download apps from official repositories, we may assume that security updates have already been applied -- or once installed, software updates will make sure the app is up-to-date with fixes. However, on Thursday, cybersecurity researchers from Check Point said that patches issued to resolve years-old flaws for popular applications may not have been applied to versions available in Google Play.

In a blog post, Check Point documented the results of a month-long study, conducted in May, into the presence of known vulnerabilities in popular mobile applications.
"Keeping track of all security updates in all external components of a sophisticated mobile app is a tedious task, and it's no surprise that few maintainers are willing to expend the effort," Check Point says
Click to expand...

Check Point: Long-known Vulnerabilities in High-Profile Android Applications

When a vulnerability is found and fixed in an open-source project, its maintainers typically have no control over the native libraries which may be affected by the vulnerability, nor the apps using these native libraries. This is how an app may keep using the outdated version of the code even years after the vulnerability is discovered.
Click to expand...

A_mouse · Nov 21, 2019

Unfortunately all the decent vulnerability scanners get bought up and taken away from public use, and those projects that haven't been bought always stall after a year or so of updates.

Log in or Sign up

Popular apps on Google Play linked to old remote code execution bugs

guest Guest

A_mouse Registered Member

Log in or Sign up

Popular apps on Google Play linked to old remote code execution bugs

guest Guest

A_mouse Registered Member

Useful Searches