Project

General

Profile

Actions
Copy link

Issue #1257

closed

Installer Hijacking vulnerability

Added by My Self about 9 years ago. Updated over 8 years ago.

Status:
Closed
Priority:
High
Assignee:
My Self
Category:
Security
Target version:
Any version
Start date:
03/30/2015
Due date:
% Done:

100%

Estimated time:
Resolution:
fixed
Device:
Grant:
Type of work:

Description

I've checked, that Replicant is vulnerable to the Installer Hijacking vulnerability.
More informations: http://researchcenter.paloaltonetworks.com/2015/03/android-installer-hijacking-vulnerability-could-expose-android-users-to-malware/

Solution/Patch
Android diff: https://android.googlesource.com/platform/packages/apps/PackageInstaller/+/2b3202c3ff18469b294629bf1416118f12492173

Files

Add-manifest-to-verification-params.patch (4.99 KB) Add-manifest-to-verification-params.patch My Self, 08/26/2015 11:38 AM
Actions
Copy link

Also available in: Atom PDF