ANDROIDOS_APPVULBUG.MARS

May 12, 2016
 PLATFORM:

Android OS

 OVERALL RISK RATING:
 REPORTED INFECTION:

  • Threat Type: Others

  • Destructiveness: No

  • Encrypted:

  • In the wild: No

  OVERVIEW

This is the Trend Micro detection for mobile vulnerabilities found in Android applications.

Fatal bug happens when an app does not check the incoming illegal parameter or data thus causing the app to crash via an attack.

Here’s an example of a fatal bug: if the code uses getExtra(), getBundleExtra(), getCharExtra(), etc. to get an incoming intent’s parameter, one must check whether the return value is null or not. Directly using the null result leads the program to throw a null point exception and crash. A malware can potentially leverage this vulnerability to attack any application.