[tg1]

And therefore cause a security threat to BlackBerry OS10? Just wondering as I have been working with Cobalt's Google Play store. I have to admit Google has some damn good apps that BlackBerry just doesn't have they have to figure out the app market. I have RBC app from BlackBerry world and RBC from Google play store and it is night and freaking day difference. Like the RBC BlackBerry App is in the freaking dark ages. Sad but true. You will have to pry my BlackBerry Passport from my cold dead hands but it will have Google apps running. Shame.

Brought to you by my Awesome BlackBerry Passport.

[Bla1ze]

A direct problem - Likely not. On BB10 the Android SMS system isn't used, instead the stock BB10 app is loaded anytime for SMS/MMS interactions. You'd really have to go out of your way to force use of the Android SMS/MMS system in order for it to work.

A indirect problem - It's not out of the realm of possibility that the issue may exist within the Android runtime and a small patch would be required just for the sake of saying it has been patched.

In the end, the issue is mostly with OEM's that haven't sent the patch the Google created out to devices. As the Android runtime is based off of AOSP with some customization, it may already have the fixes in place but it's hard to say without any deeper knowledge of the runtime.

As of right now, BlackBerry has issued no statements on it through SIRT. - https://twitter.com/bbsirt

[bazillus]

Well, the runtime is affected... PassportSQW100-1/10.3.2.2204

[gariac]

A direct problem - Likely not. On BB10 the Android SMS system isn't used, instead the stock BB10 app is loaded anytime for SMS/MMS interactions. You'd really have to go out of your way to force use of the Android SMS/MMS system in order for it to work.

A indirect problem - It's not out of the realm of possibility that the issue may exist within the Android runtime and a small patch would be required just for the sake of saying it has been patched.

In the end, the issue is mostly with OEM's that haven't sent the patch the Google created out to devices. As the Android runtime is based off of AOSP with some customization, it may already have the fixes in place but it's hard to say without any deeper knowledge of the runtime.

As of right now, BlackBerry has issued no statements on it through SIRT. - https://twitter.com/bbsirt

Is it me, or shouldn't we have a BBM channel instead of Twitter for this news.

Posted via CB10

[gariac]

It is possible the "Stage fright" detector just looks for auto-retrieve of MMS, not an actual exploit.

Posted via CB10

[Superdupont 2_0]

Yep, same here.
I installed the Stagefright Detector App (Source: Google Playstore)

Posted via CB10

[Richard Buckley]

Yep, same here.
I installed the Stagefright Detector App (Source: Google Playstore)

Posted via CB10

I suspect that the app is just checking the library for vulnerability. Not surprising that, or as gariac mentioned, just checking for auto-retrieve which is default on in Android installations. A known mitigation is to turn auto-retrieve off. So if you can do that, or better still, not have an Android MMS application installed then you should be OK.

[gariac]

I suspect that the app is just checking the library for vulnerability. Not surprising that, or as gariac mentioned, just checking for auto-retrieve which is default on in Android installations. A known mitigation is to turn auto-retrieve off. So if you can do that, or better still, not have an Android MMS application installed then you should be OK.

A real detector would have a harmless exploit as a payload. That is, make the phone do something to indicate it is pwned.

Stage Fright uses a very low level vector. That is why it can achieve such a high level of permission (system level, a step down from root). The BlackBerry Android player seems more sandboxed.

Posted via CB10

[padrini]

Statement from BlackBerry regarding StageFright:

BlackBerry is aware that certain applications report that BlackBerry 10 devices are affected by the vulnerabilities known as �StageFright�. Only some of these issues affect the Android Runtime on BlackBerry 10 devices. MMS messages are not interpreted by the Android Runtime by default. Additionally, BlackBerry 10 is not vulnerable to the StageFright ASLR bypass.

Although these vulnerabilities represent a low risk to BlackBerry 10 customers, we are planning to remediate any vulnerable code in future updates.

Thanks,
BBSIRT

After that I reached out again regarding other ways to exploit it and their response was this:

Although we highlighted MMS due to the amount of media coverage it received, we have assessed all attack vectors outlined by the researcher and factored them into our risk assessment, and still consider this to be a low risk to BlackBerry 10 customers.*


Posted via CB10

[BCITMike]

When they said "Additionally, BlackBerry 10 is not vulnerable to the StageFright ASLR bypass," they should have just said "...and consider this to be a no risk to BlackBerry 10 customers."

[tw_]

I upgraded my Passport to 10.3.2.2474 and now I get the green bar in Stagefright Detector: