Google Android DNS Resolver Vulnerability

Last Update Date: 25 Jul 2012 15:00 Release Date: 25 Jul 2012 4966 Views

RISK: Medium Risk

TYPE: Operating Systems - Mobile & Apps

A vulnerability has been identified in Google Android, which can be exploited by remote user to return spoofed DNS responses and poison the DNS cache on the target system.

Impact

Spoofing

System / Technologies affected

Google Android 4.0.4 and prior versions

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.

Update to version 4.1.1

Vulnerability Identifier

CVE-2012-2808

Source

Security Tracker