If you can, update your email app to version 4. Of course, that’s quite a nuisance if someone keeps emailing you malicious emails designed to crash your mail app.īut the permanent solution should be even simpler. Your Android mail app will no longer attempt to download the email (because it has been zapped) and so won’t see any offending email headers that might cause it to trip over itself. The most obvious is to log into the web version of your email and delete the offending email there. Albeit one that prevents you from easily accessing your email rather than an attack which clogs up your website and causes it to fall over.įortunately, there is an easy solution. This is, effectively, a denial of service attack.
Worse still, reopening the app will just cause it to crash again, because every time the app attempts to download the malicious email it will keep triggering the same fault.
It appears that simply sending an email with a malformed Content-Disposition entry in its header can cause the app to crash. The vulnerability, dubbed CVE-2015-1574, lies in how some versions of mail for Android parse the Content-Disposition header.
0 kommentar(er)
