As hardware manufacturers and smartphone vendors quietly roll out fixes for Android's Stagefright vulnerability, there's a new app out that will let users know whether or not their mobile devices have received security patches to close up the loophole.
The new Stagefright Detector app is being offered by the same security firm that first advised the public of the vulnerability, Zimperium zLabs.
Specifically, it was Joshua Drake, VP of Platform Research and Exploitation at Zimperium zLabs, who discovered Stagefright's vulnerability and offered patches to Google.
"We also provided these patches to carriers and vendors through Zimperium Handset Alliance," says Zimperium zLabs. "While the patches have been applied, it may be years until they reach all devices."
Zimperium zLabs' Stagefright Detector app will assess a user's mobile device to determine whether or not Stagefright is still vulnerable. It'll also let the user know whether or not he or she needs to upgrade his or her mobile operating system.
Stagefright is a media engine and a core component of the Android OS. Last month, Zimperium discovered that Stagefright was vulnerable to an exploit that would give hackers access to a victim's entire media library.
Stagefright "allows hackers to get system or media privileges of your device when your device is processing an MMS, without need of any end-user action," says Zimperium zLabs. "To make matters worse, MMS can delete itself before you open it. With such potential, Stagefright can wreak havoc on carriers and enterprises using Android devices for business."
On the heels of the discovery of Stagefright, another security firm found more security backdoors in Android. Check Point Software Technologies on Aug. 6 reported finding vulnerability, dubbed "Certifi-gate," which could be used to give apps unauthorized access to other apps and services on a victimized mobile device.
"This vulnerability is very easily exploited, and can lead to the loss and dissemination of a user's personal data. It's time to take mobile security seriously," said Dorit Dor, vice president of products at Check Point Software Technologies.
Check Point also announced that it is offering a new threat detection and prevention tool, branded Check Point Mobile Threat Prevention.
