BlueStacks Flaw Lets Attackers Remotely Control Android Emulator

guest · Jun 25, 2019

BlueStacks Flaw Lets Attackers Remotely Control Android Emulator
June 25, 2019
https://www.bleepingcomputer.com/ne...-attackers-remotely-control-android-emulator/

Vulnerabilities in the BlueStacks Android emulator were fixed at the end of May that allowed attackers to perform remote code execution, information disclosure, and to steal backups of the VM and its data.

In BlueStacks versions earlier than v4.90.0.1046, a DNS rebinding vulnerability existed that allowed attackers to gain access to the emulator's IPC functions. These functions could then be used for a variety of different attacks ranging from remote code execution to information disclosure.

"An attacker can use DNS Rebinding to gain access to the BlueStacks App Player IPC mechanism via a malicious web page," stated BlueStacks' advisory. "From there, various exposed IPC functions can be abused."
According to Cano, BlueStacks is not backporting this fix to versions 2 or 3, so users are strongly advised to upgrade to the latest version 4 as soon as possible.
The BlueStacks DNS Rebinding vulnerability
BlueStacks was vulnerabile to a DNS Rebinding attack because it exposed an IPC interface on 127.0.0.1 without any authentication.
Click to expand...

Log in or Sign up

BlueStacks Flaw Lets Attackers Remotely Control Android Emulator

guest Guest

Log in or Sign up

BlueStacks Flaw Lets Attackers Remotely Control Android Emulator

guest Guest

Useful Searches