Android Security Fix MMS Flaw

By | July 27, 2015

Android security fix MMS flaw – Turn Off MMS Message Auto retrieve.

Below is only a workaround for Android’s MMS Security Flaw (aka Stagefright)

Please update your Android phone ASAP.  There are several other flaws related to Stagefright that this workaround will not help!

Android Security Fix Steps

Step 1 – Hangouts or Messaging

If you’re using Google Hangouts for SMS/MMS, open Hangouts app. (For Messaging app?)

android-hangouts

Step 2 – Settings

Click on Settings

android-hangouts-settings-0

Step 3 – SMS

Click on SMS

android-hangouts-sms

Step 4 – Multimedia (MMS) Messages > Auto retrieve MMS = OFF

(Click to) remove the checkbox from Auto retrieve MMS.  You’re done.

android-hangouts-mms-auto-retrieve

 

Stagefright flaw in Android exploits how Android’s MMS (Multimedia Messages) system automatically downloads MMS content (e.g. video) to be read / cached locally, without any user interaction.  This automatic reading of the MMS content allows attackers to embed their virus / trojan payload into a video which will automatically be run by Android’s Content Provider / Stagefright system.

This Google Android Vulnerability MMS Flaw was found by Joshua Drake (twitter) of Zimperium.

More info links on Android MMS Flaw & Stagefright

http://blog.zimperium.com/experts-found-a-unicorn-in-the-heart-of-android/

http://www.forbes.com/sites/thomasbrewster/2015/07/27/android-text-attacks/

Android Media / Stagefright

Android Messaging MMS Security Flaw Fix

If you’re using Android Messaging app, instead of Google Android Hangouts, follow these steps…

Step 1 – Open Messaging app & Messaging Settings

android-messaging-settings

Step 2 – Multimedia (MMS) Messages – Auto-retrieve OFF

Scroll down to Multimedia (MMS) Messages.

Uncheck Auto-retrieve.  You’re done.

android-messaging-mms-auto-retrieve-off


Related Articles: