New android security bug 9950697 detected 4.4 (kit-kat)

[badblue1]

Well kids it looks like we have another security bug :9950697
Android 4.4 KitKat also affected by Master Key vulnerability

Patch for 4.4 (kit-kat) :

Android 4.4 patches another Master Key bug [UPDATED] - Android Community

New app to check for vulnerability :

https://play.google.com/store/apps/details?id=de.backessrt.appintegrity&hl=en

More detailed info from (saurik.com)

Yet Another Android Master Key Bug - Jay Freeman (saurik)

 

[Rukbat]

Maybe I missed the memo. Is it "get some good software out the door, so we'll look as if we know what we're doing"? Or is it "get as much software out the door as we can so we look as if we're doing something"?

Or did I just wake up in a different world one morning about 25 years ago?

 

[binaryhermit]

Strangely enough, my Droid RAZR M running 4.1.2 doesn't have this bug, according to the linked app.

 

[dibblebill]

No vulnerabilities detected on my Nexus 10. Scanning my phone as soon as it installs

 

[El Presidente]

The way I read the article, it's a similar bug, different exploit?

So if you ran the exploit check on a non 4.4 ROM, it would come up clean (as the app was looking for a different exploit)?

 

[dibblebill]

Negative on that- my 4.1.2 phone came up dirty for two exploits

 

[Goodspike]

New app to check for vulnerability :

https://play.google.com/store/apps/details?id=de.backessrt.appintegrity&hl=en

Clearly an app written by amateurs! That app doesn't require a single permission, let alone several unnecessary permissions. How could they possible expect to check for security vulnerabilities without accessing my GPS, emails, contacts and network connections? /sarc

 

[Digital Controller]

The way I read the article, it's a similar bug, different exploit?

So if you ran the exploit check on a non 4.4 ROM, it would come up clean (as the app was looking for a different exploit)?

It came up clean on my 4.4 ROM, weird....

It could be that the exploit was written out of the ROM, i don't know, or that, like you said, it is looking for a different one.

 

[badblue1]

As long as you install apps from a trusted source (Google playstore) you have nothing to worry about.

 

[mplevy]

My Moto X on Verizon with the 4.4 OTA has no vulnerabilities.