Everyone

Zimperium INC.

Gingerbread

Stagefright Detector App for Android Devices

Zimperium zLabs expert and VP of Platform Research and Exploitation, Joshua Drake (@jduck) discovered multiple critical vulnerabilities in Stagefright library and provided patches to Google to secure Android. We provided these patches to carriers and vendors through Zimperium Handset Alliance (ZHA). While the patches have been applied, it may be years until they reach all devices.

Zimperium zLabs created a Detector app to validate that you are running a version that is not vulnerable to the discovered Stagefright vulnerabilities. Some phone vendors have released partial patches to the vulnerabilities disclosed and this app can help you to understand if your device is vulnerable or not.

Stagefright is a critical Android vulnerability. It allows hackers to get 'media' or 'system' privileges on your device after processing an incoming MMS message, by surfing the web any one of the 11 potential attack vectors. In many cases, the attack do not require any end-user action. To make matters worse, the attacker can delete the MMS before you open it. 

In order to test if your device is vulnerable, we built the ‘Stagefright Detector’ app. 

This app will tell you three major things:

-  whether your device is vulnerable 

-  which CVEs your device is vulnerable to

-  whether you need to update your mobile operating system

Stay protected: ZIMPERIUM Mobile Threat Protection enterprise customers, vendors and carriers are protected from the Stagefright vulnerability without requiring any special update.

This application anonymously collect the results of the test and shares it with device vendors and carriers through ZHA. We do not collect any personal information.

Carriers and Device Vendors that are interested to join Zimperium Handset Alliance and increase the security of its user base - join here: <a href="https://www.google.com/url?q=https://www.google.com/url?q%3Dhttps://groups.google.com/forum/%2523!forum/zimperium-handset-alliances%26sa%3DD%26usg%3DAFQjCNF5Mchm45CSkDVGp0ihjWvfigzNtg&sa=D&usg=AFQjCNHj-lxX2bEX4-oAcAINXiyXj6rBMw" target="_blank">https://groups.google.com/forum/#!forum/zimperium-handset-alliances</a>

About Zimperium:

Zimperium is a pioneer in advanced mobile threat protection, delivering enterprise-grade solutions for Android and iOS devices. Our solutions use patented machine-learning technology to detect host and network-based threats in real-time. Founded in 2010, Zimperium is backed by Samsung, Telstra and Sierra Ventures, and has enterprise customers across all major verticals worldwide.

</div> <div jsname="WJz9Hc" style="display:none">Stagefright探测器应用为Android设备

Zimperium zLabs专家及平台的研究和开发副总裁约书亚·德雷克（@jduck）发现多个严重漏洞的Stagefright库，并提供修补程序，以谷歌为Android的安全。我们通过Zimperium手机联盟（查）提供这些补丁，以运营商和供应商。而修补已应用，它可以是年，直到它们到达所有设备。

Zimperium zLabs创建一个应用程序检测，以验证您正在运行一个版本，是不容易发现的Stagefright漏洞。一些手机厂商已经发布了补丁的部分所披露的漏洞和这个程序可以帮助你了解，如果你的设备很容易与否。

Stagefright是一个关键的Andr​​oid漏洞。它允许黑客获得处理传入的彩信，通过网上冲浪的11个潜在的攻击媒介的任何一个后'媒体'或设备上的“系统”的特权。在许多情况下，攻击不需要任何终端用户操作。更糟糕的是，你打开它之前，攻击者可以删除彩信。

为了测试，如果你的设备是脆弱的，我们建立了“Stagefright检测器”的应用程序。

这个程序会告诉你三个主要方面：

 - 您的设备是否是脆弱的

 - 这CVES你的设备很容易被

 - 您是否需要更新您的手机操作系统

留保护：ZIMPERIUM移动威胁防护的企业客户，供应商和运营商都防Stagefright漏洞，而不需要任何特殊的更新。

本申请匿名收集测试，并将它与通过查设备供应商和运营商股的结果。我们不收集任何个人信息。

电信运营商和设备供应商有兴趣加入Zimperium手机联盟，并增加其用户群的安全性 - 在此交汇：<a href="https://www.google.com/url?q=https://groups.google.com/forum/%23&sa=D&usg=AFQjCNGIDiNv2qAnjVoQsBGfmf-8jKcWZQ" target="_blank">https://groups.google.com/forum/#</a>​​!forum/zimperium-handset-alliances

关于Zimperium：

Zimperium是一个先驱先进的移动威胁防护，提供企业级解决方案为Android和iOS设备。我们的解决方案采用专利的机器学习技术来检测主机和基于网络的威胁的实时性。公司成立于2010年，Zimperium是由三星，Telstra和Sierra Ventures公司的支持，并拥有企业客户遍布全球各主要垂直。</div> <div class="show-more-end">

Stagefright Detector

Stagefright Detector的最新版本