Security flaws unearthed in Google's Android

By Marguerite Reardon, CNET News.com
Thursday, March 06, 2008 10:22 AM

Researchers have found some holes in Google's Android SDK that could make the software vulnerable to hack attacks.

Core Security published an alert on Tuesday stating that it had found eight vulnerabilities related to some open source image processing libraries in Google's Android SDK, which the group claims are outdated. Attackers exploiting these vulnerabilities could take complete control of Android handsets, the alert said.

It's hardly surprising that some kind of vulnerability would be discovered. And, in fact, it's probably a good thing that groups like Core are discovering problems now. Android, which Google announced in November, is still in beta. Even though several companies showed off prototypes using the Android software at Mobile World Congress last month, none of them have built a commercial product yet.

The final version of the software code won't be available until later this year so Core and other developers and security experts will hopefully find more glitches allowing Google and the rest of the developer community to fix them before the phones hit the market.

This article was first published as a blog on CNET News.com.


WORTHWHILE?

0

0 votes
Blog

Talkback 0 comments

There are currently no comments for this post.


Tech Jobs Now!

Search for your ideal tech job:

A look at the Terminal Services Manager in Windows Server 2008

Windows Server

Terminal Services Manager has been around for a while, but Microsoft made some changes to the utility in Windows Server 2008. Here's what you'll find.


Read more »



Open source blog reloaded!

Blog thumbnail

This is with great pleasure that this "little corner of the Web" is resuming activities through another member of the (now famous ;-)) Beijing Linux User Group (BLUG) doing the..... by Fred Muller

Read more »

Tags

  1. attack
  2. authentication and encryption
  3. blog
  4. data security
  5. e - mail
  6. google inc.
  7. internet
  8. malware
  9. microsoft corp.
  10. network
  11. network security
  12. pc security
  13. researcher
  14. security
  15. security management
  16. software
  17. spam and phishing
  18. symantec corp.
  19. viruses and worms
  20. web