
stagefriet (bugg)

android operating sisttathinte 2.2 "froyo" muthal 5.1.1 "lollipop" vareyulla pathippukale badhikkunna oru koottam software bagukalkku nalkia peraanu stagefriet, akkaalat 950 dasalaksham upakaranangal (ellah android upakaranangaludeyum 95 sathamaanam) thurannukaattunnu. mms sandeshangal anpaakk cheyyaan upayogikkunna, mattu karyangalkkoppam, baadhicha libraryil ninnaan peru eduthirikkunnathu. remot coode execution, privileju escalation ennivayiloode irayude upakaranathil ekapaksheeyamaaya pravartthanangal nadatthaan bugg chooshanam cheiyunnathu aakramanakaariye anuvadikkunnu. suraksha gaveshakar irayude upakaranathilekku prathyekamaayi roopakalppana cheytha mms sandeshangal ayaykkunna aashayathinte thelivu upayogichu bagukal pradarshippikkunnu, mikka kesukalilum vijayikkaan sandesham sweekarikkumbol anthima upayokthru pravarthanangalonnum aavasyamilla-bugg upayogichu chooshanangal 'sweekarikkaan' upayokthaav onnum cheyyendathilla; athu pashchaathalatthil sambhavikkunnu. akramanam nadatthaan aavashyamaaya oreyoru vivarangal phoon nambaraanu.
android coor gadakathile chila poornnasankhya overflo kedupaadukal adisthaana aakramana vekttar chooshanam cheiyunnu, ithu android ooppan sozhs projakttinte (aosp) bhaagamaayi praadhamikamaayi sii + + ll nadappilaakkukayum empy 4 fayalukal polulla vividha multimedia formaattukal play cheiyunnathinulla backend enchinaakki upayogikkukayum cheiyunna oru sankeernna software libraryaanu.
kandethiya bagukalkku onniladhikam saadhaarana kedupaadukalum exposureukalum (sii. vii. iii) identifierukalum nalkiyittundu, (randaamathethu mattullavaril ninnu vevvere nalkiyittundu), avaye mothatthil stagefriet bugg ennu vilikkunnu.
charithram.
symperium security sthaapanathil ninnulla joshuva drake stagefriet bugg kandethiyathu, 2015 juulai 27 nuu aadyamaayi parasyamaayi prakhyaapichu. prakhyaapanathinu munbu, 2015 eprilil drake googilinodu bugg report cheythu, report cheyth rund divasathinu sesham athinte aantharika sozhs coode shekharangalil anubandha bugfix ulppeduthi. 2015 joolaiyil, mosco aasthaanamaayulla suraksha gaveshakanaaya evjeni legerov, stagefriet libraryil samanamaaya rund koombaarangalengilum seero-day kedupaadukal kandethiyathayi prakhyaapichu, athe samayam library ithinakam chooshanam cheyyappettuvennu avakashappettu. googilinu samarppicha paachukal prayogikkunnathiloode thaan kandethiya kedupaadukal upayogikkaanaavaathavayaane legerov sthireekarichu.
2015 august 5 nuu black haatt usa computer security konfaransilum 2015 august 7 nuu def koonn 23 hacker kanvenshanilum drake avatharippicha stagefriet baginte poornna velippeduthal nadannu. velippeduthalinethudar, 2015 august 5 nuu symperium oru proof-oof-kanseptt exployittinte sozhs coode, stagefriet libraryude yadhaartha paachukal (paachukal 2015 meyy aadyam muthal aospyilum mattu ooppan sozhs shekharangalilum parasyamaayi labhyamaayirunnuvenkilum), oru android upakaranam stagefriet bugg baadhikkumo ennu parishodhikkunna "stagefriet dittaktar" enna android aaplikkeshan enniva parasyamaayi puratthirakki.
2015 august 13nuu exodus intelligence mattoru stagefriet vulnerability prasidheekarichu. ithinakam ariyappedunna kedupaadukalude nilavilulla pariharangalaal eee kedupaadukal laghookarichilla. 2015 august 13 nuu sayanojenmodu team oru ariyipp prasidheekarichu, sii. vii.-<aii. dii. 1>-nulla paachukal sayanojenmodu 12.1 srothassil ulppeduthiyittundu.
2015 october 1 nuu symperium stagefriet 2 ennum ariyappedunna kooduthal kedupaadukalude vishadaamshangal puratthirakki. eee kedupaadukal android media server upayogichu play cheyyumbol payload execute cheiyunna prathyekamaayi roopakalppana cheytha empy 3, empy 4 fayalukale badhikkunnu. android aadyamaayi purathirangiyathu muthal nilaninnirunna androidinte oru gadakamaaya libutils enna coor android libraryil eee durbalathaye thirichariyunna upakaranamaayi niyogichittundu. android 1.5 muthal 5.1 vareyullava eee puthiya aakramanathinu irayaakunnuvennum oru bilyan upakaranangale baadhichathaayum kanakkaakkappedunnu.
prathyaaghaathangal.
google androidinte praadhamika codebase fameware paripaalikkumbol, vividha android upakaranangalude apdettukal wireless carrierukaludeyum yadhaartha upakarana nirmmaathaakkaludeyum (oem) utharavaadithamaanu. thalphalamaayi, nirmmathaakkal, upakarana vakabhedangal, android pathippukal, nirmmathaakkal nadathunna vividha android ishtaanusrithamaakkalukal enniva thammilulla valia vibhajanam kaaranam yadhaartha upakaranangalilekku paachukal pracharippikkunnath palappozhum neenda kaalathamasam srishtikkunnu; koodaathe, pazhayatho kuranjatho aaya pala upakaranagalkkum orikkalum paachu cheytha famewareukal labikkilla. pala wireless karaarukalude nibandhanakalum lamghikkunna, paripaalikkappedaatha pala upakaranangalum verode vekkendathundu. athinaal, android paachukalude prachaaranavumayi bandhapetta saankethikavum samghadanaaparavumaaya budhimuttukal stagefriet baginte swabhaavam eduthukaanikkunnu.
android paachukalude prachaaranavumayi bandhapetta kaalathaamasangalum prashnangalum pariharikkunnathinulla shramamenna nilayil, 2015 august 1 nuu symperium vivarangal kaimarunnathinum androidinte surakshayumaayi bandhapetta prashnangalekkurichu samayabandhithamayi apdettukal sweekarikkunnathinum thaalpparyamulla vividha kakshikalude oru associationaayi "symperium handset alayans" (shh) roopeekarichu. simperiyathinte proof-oof-kanseptt stagefriet exployittinte sozhs code jhaa amgangalkku athu parasyamaayi purathirakkunnathinu munbu labhichu. ettavum valia android upakaranangalaya oemmukalum wireless kaariyarukalum ulppede 25 ennam zaa yill chernnu.
laghookaranam.
androidinte paachu cheyyaatha pathippukal pravarthippikkunna upakaranagalil mms sandeshangalude yaanthrika veendedukkal pravarthanarahithamaakkuka, anjjaatha ayachavaril ninnulla vaachaka sandeshangal sweekarikkunnathu thadayuka enniva ulppede stagefriet baginte chila laghookaranangal nilavilundu. ennirunnaalum, eee rund laghookaranangalum ellah mms aaplikkeshanukalilum pinthunaykkunnilla (udaaharanathinu, google hangt aaplikkeshan, aadyathethu maathram pinthunaykkunnu), koodaathe upakaranathinte web brouser upayogichu oru kshudra multimedia phayal thurakkukayo daunlodu cheiyukayo cheiyunnathu polulla mattu maargangaliloode stagefriet bugg chooshanam cheiyunnathu saadhyamaakkunna saadhyamaaya ellah aakramana vektarukalum avaa ulkkollunnilla.
android 4.0 "iscream sandwichil" avatharippicha, android 4.1 "jellie beenil" poornnamaayum pravarthanakshamamaakkiya, adrus space leauttu randomisation (aslr) savisheshathayil ninnu kooduthal laghookaranam varumennu aadyam karuthiyirunnu; android 5.1 "lollipop" pathippil stagefriet baginunereyulla paachukal ulppedunnu.
nirbhagyavashaal, pilkkala phalangalum asplerine baipas cheiyunna roopakam polulla chooshanangalum 2016-ll kandethi.
android 10 leeii kanakkanusarichu, software kodekkukal oru sandboxylake maatti, ithu oesinte eee pathipp pravarthippikkaan kazhivulla upakaranagalkkulla eee bhishaniye phalapradamaayi laghookarikkunnu.

