Samsung Galaxy S3, Galaxy Note 2 security fix in the works
Posted on 20 Dec 2012 at 09:18, by Gareth Halfacree
Samsung has responded to reports that its Exynos 4-based products, including the Galaxy S3 and Galaxy Note 2, contain a serious security flaw that allows an attacker complete control over the device, admitting that the issue exists and promising a fix as soon as possible.
The flaw, which is present in all known Exynos 4-based devices in the Galaxy family, allows an attacker full read and write access to the smartphone or tablet's memory - giving complete control over the device in question. As well as being able to modify running applications or install unauthorised software, the flaw allows an attacker to access usernames and passwords, monitor voice and data traffic, and even to activate microphones and cameras for remote spying.
While Samsung has admitted that the flaw exists, the company claims it's not as serious as the security community is making out. "The issue may arise only when a malicious application is operated on the affected devices," a company spokesman pointed out in a statement to press late last night. "This does not affect most devices operating credible and authenticated applications."
Despite this, Samsung claims to be taking the problem seriously and is working on a fix to address the issue. Although third-party patches exist to resolve the problem, these require a phone running unofficial software - a process known as 'rooting' in the Android community - and can cause problems with using the camera application, which is tied into the memory access enabled by the security flaw.
Sadly, Samsung has not offered a timescale for fixing the issue, stating only that it will "monitor the situation until the software fix has been made available to all affected mobile devices."
Find a review
- White Nexus 4, Android 4.3 release date looks set for June
- Google I/O 2013: what got announced - and what didn't
- Samsung Galaxy Mega release date delayed until July
- Samsung Galaxy S4 Google Edition revealed, HTC One plans denied
- Samsung Galaxy S4 Google Edition may launch at I/O conference
- Samsung Galaxy S4 added to Apple patent infringement suit
- Blackberry Q5 announced for emerging markets
- iPhone 5S release date, specs, features & price rumours
- Nokia Lumia 925 review - hands on
- BT 4G mobile network to be powered by customer's routers