Critical bug threatens to bite mobile phones and networks
http://arstechnica.com/security/2016/07/software-flaw-puts-mobile-phones-and-networks-at-risk-of-complete-takeover/
A newly disclosed vulnerability could allow attackers to seize
control of mobile phones and key parts of the world's
telecommunications infrastructure and make it possible to
eavesdrop or disrupt entire networks, security experts warned
Tuesday. The bug resides in a code library used in a wide
range of telecommunication products, including radios in cell
towers, routers, and switches, as well as the baseband chips
in individual phones. Although exploiting the heap overflow
vulnerability would require great skill and resources,
attackers who managed to succeed would have the ability to
execute malicious code on virtually all of those devices. The
code library was developed by Pennsylvania-based Objective
Systems and is used to implement a telephony standard known as
ASN.1, short for Abstract Syntax Notation One.
- - -
--Lauren--
Lauren Weinstein ([email protected]): http://www.vortex.com/lauren
Founder:
- Network Neutrality Squad: http://www.nnsquad.org
- PRIVACY Forum: http://www.vortex.com/privacy-info
Co-Founder: People For Internet Responsibility: http://www.pfir.org/pfir-info
Member: ACM Committee on Computers and Public Policy
Lauren's Blog: http://lauren.vortex.com
Google+: http://google.com/+LaurenWeinstein
Twitter: http://twitter.com/laurenweinstein
Tel: +1 (818) 225-2800 / Skype: vortex.com
I have consulted to Google, but I am not currently
doing so -- my opinions expressed here are mine alone.
_______________________________________________
pfir mailing list
http://lists.pfir.org/mailman/listinfo/pfir
