 |
|
|
Few days after a security flaw was discovered in the Android browser, Google has already started rolling a software update to fix it. Users will probably receive it progressively, but all of them are expected to be able to upgrade their software soon, according to a Google spokesperson.
Researchers at Independent Security Evaluators last week managed to identify and exploit a security vulnerability in the Android operating system. All users surfing the web on their browsers were vulnerable to exploits upon visiting a malicious page.
Android is based on 80 open source packages, some of which did not
have the latest versions, ISE said. However, they did not release any
further information on what those package were, so as to allow Google
to fix the vulnerability.
They explained that a successful exploit would grant the attacker access to any information the browser might use, such as cookies, saved passwords etc. On the other hand, the exploit would by no means be able to take over the phone.
“The Android security architecture is very well constructed and the impact of this attack is somewhat limited by it,” the researchers wrote. They also pointed out that this is completely different from Apple’s iPhone, which does not have the application sandbox feature, allowing access to all features on the phone in case of an attack.
Google’s Android phone launched on the North American market last week, and is available for all T-Mobile subscribers. The Android platform has already turned into a hit, and next year, we can expect to see more Android phones coming out.
© 2007 - 2009 - eFluxMedia