Corrupdate vulnerability in Samsung Account App
Posted by NowSecure Mobile Security Advocate NowSecure Marketing
VULNERABILITY
NowSecure has discovered that Samsung Account is susceptible to man-in-the-middle attack (CVE 2015-0864). The vulnerability allows a remote attacker to install a malicious app, which could steal data or attempt other attacks.
RECOMMENDATION
Since this is a system app, you cannot uninstall. On a trusted network, open any app that requires Samsung login, and you should be prompted to update. Alternatively you can disable the app in Settings > Application manager.
Review technical details about this vulnerability in the technical blog post.
AFFECTED VERSIONS
Samsung Account app
| Name | Version | Vendor | Platform |
| com.osp.app.signin | 2.1.0061 | Android | |
| com.osp.app.signin | 2.1.0047 | Android | |
| com.osp.app.signin | 2.1.0039 | Android | |
| com.osp.app.signin | 2.1.0037 | Android | |
| com.osp.app.signin | 2.1.0033 | Android | |
| com.osp.app.signin | 2.1.0031 | Android | |
| com.osp.app.signin | 2.1.0028 | Android | |
| com.osp.app.signin | 2.1.0024 | Android | |
| com.osp.app.signin | 2.1.0014 | Android | |
| com.osp.app.signin | 2.1.0010 | Android | |
| com.osp.app.signin | 2.0.0154 | Android | |
| com.osp.app.signin | 2.0.0151 | Android | |
| com.osp.app.signin | 2.0.0148 | Android | |
| com.osp.app.signin | 2.0.0146 | Android | |
| com.osp.app.signin | 2.0.0144 | Android | |
| com.osp.app.signin | 2.0.0140 | Android | |
| com.osp.app.signin | 2.0.0125 | Android | |
| com.osp.app.signin | 2.0.0123 | Android | |
| com.osp.app.signin | 2.0.0116 | Android | |
| com.osp.app.signin | 2.0.0114 | Android | |
| com.osp.app.signin | 2.0.0111 | Android | |
| com.osp.app.signin | 2.0.0110 | Android | |
| com.osp.app.signin | 2.0.0105 | Android | |
| com.osp.app.signin | 2.0.0097 | Android | |
| com.osp.app.signin | 2.0.0095 | Android | |
| com.osp.app.signin | 2.0.0089 | Android | |
| com.osp.app.signin | 2.0.0080 | Android | |
| com.osp.app.signin | 2.0.0079 | Android | |
| com.osp.app.signin | 2.0.0078 | Android | |
| com.osp.app.signin | 2.0.0060 | Android | |
| com.osp.app.signin | 2.0.0042 | Android | |
| com.osp.app.signin | 2.0.0040 | Android | |
| com.osp.app.signin | 1.6.0059 | Android | |
| com.osp.app.signin | 1.6.0057 | Android | |
| com.osp.app.signin | 1.6.0039 | Android | |
| com.osp.app.signin | 1.6.0033 | Android | |
| com.osp.app.signin | 1.6.0028 | Android | |
| com.osp.app.signin | 1.6.0015 | Android | |
| com.osp.app.signin | 1.6.0010 | Android | |
| com.osp.app.signin | 1.5.0459 | Android | |
| com.osp.app.signin | 1.5.0450 | Android | |
| com.osp.app.signin | 1.5.0444 | Android | |
| com.osp.app.signin | 1.5.0440 | Android | |
| com.osp.app.signin | 1.5.0436 | Android | |
| com.osp.app.signin | 1.5.0430 | Android | |
| com.osp.app.signin | 1.5.0427 | Android | |
| com.osp.app.signin | 1.5.0422 | Android | |
| com.osp.app.signin | 1.5.0421 | Android | |
| com.osp.app.signin | 1.5.0419 | Android | |
| com.osp.app.signin | 1.5.0414 | Android | |
| com.osp.app.signin | 1.5.0413 | Android | |
| com.osp.app.signin | 1.5.0412 | Android | |
| com.osp.app.signin | 1.5.0410 | Android | |
| com.osp.app.signin | 1.5.0406 | Android | |
| com.osp.app.signin | 1.5.0394 | Android | |
| com.osp.app.signin | 1.5.0392 | Android | |
| com.osp.app.signin | 1.5.0391 | Android | |
| com.osp.app.signin | 1.5.0390 | Android | |
| com.osp.app.signin | 1.5.0388 | Android | |
| com.osp.app.signin | 1.5.0386 | Android | |
| com.osp.app.signin | 1.5.0385 | Android | |
| com.osp.app.signin | 1.5.0384 | Android | |
| com.osp.app.signin | 1.5.0381 | Android | |
| com.osp.app.signin | 1.5.0380 | Android | |
| com.osp.app.signin | 1.5.0376 | Android | |
| com.osp.app.signin | 1.5.0375 | Android | |
| com.osp.app.signin | 1.5.0365 | Android | |
| com.osp.app.signin | 1.5.0362 | Android | |
| com.osp.app.signin | 1.5.0360 | Android | |
| com.osp.app.signin | 1.5.0358 | Android | |
| com.osp.app.signin | 1.5.0356 | Android | |
| com.osp.app.signin | 1.5.0355 | Android | |
| com.osp.app.signin | 1.5.0350 | Android | |
| com.osp.app.signin | 1.5.0348 | Android | |
| com.osp.app.signin | 1.5.0340 | Android | |
| com.osp.app.signin | 1.5.0338 | Android | |
| com.osp.app.signin | 1.5.0336 | Android | |
| com.osp.app.signin | 1.5.0331 | Android | |
| com.osp.app.signin | 1.5.0328 | Android | |
| com.osp.app.signin | 1.5.0325 | Android | |
| com.osp.app.signin | 1.5.0324 | Android | |
| com.osp.app.signin | 1.5.0319 | Android | |
| com.osp.app.signin | 1.5.0318 | Android | |
| com.osp.app.signin | 1.5.0314 | Android | |
| com.osp.app.signin | 1.5.0307 | Android | |
| com.osp.app.signin | 1.5.0306 | Android | |
| com.osp.app.signin | 1.5.0302 | Android | |
| com.osp.app.signin | 1.5.0243 | Android | |
| com.osp.app.signin | 1.5.0241 | Android | |
| com.osp.app.signin | 1.5.0239 | Android | |
| com.osp.app.signin | 1.5.0238 | Android | |
| com.osp.app.signin | 1.5.0229 | Android | |
| com.osp.app.signin | 1.5.0226 | Android | |
| com.osp.app.signin | 1.5.0224 | Android | |
| com.osp.app.signin | 1.5.0223 | Android | |
| com.osp.app.signin | 1.5.0222 | Android | |
| com.osp.app.signin | 1.5.0219 | Android | |
| com.osp.app.signin | 1.5.0218 | Android | |
| com.osp.app.signin | 1.5.0214 | Android | |
| com.osp.app.signin | 1.5.0213 | Android | |
| com.osp.app.signin | 1.5.0210 | Android | |
| com.osp.app.signin | 1.5.0208 | Android | |
| com.osp.app.signin | 1.5.0116 | Android | |
| com.osp.app.signin | 1.5.0018 | Android | |
| com.osp.app.signin | 1.5.0017 | Android | |
| com.osp.app.signin | 1.4.0424 | Android | |
| com.osp.app.signin | 1.4.0405 | Android | |
| com.osp.app.signin | 1.4.0394 | Android | |
| com.osp.app.signin | 1.4.0389 | Android | |
| com.osp.app.signin | 1.4.0377 | Android | |
| com.osp.app.signin | 1.4.0374 | Android | |
| com.osp.app.signin | 1.4.0370 | Android | |
| com.osp.app.signin | 1.4.0369 | Android | |
| com.osp.app.signin | 1.4.0365 | Android | |
| com.osp.app.signin | 1.4.0363 | Android | |
| com.osp.app.signin | 1.4.0361 | Android | |
| com.osp.app.signin | 1.4.0354 | Android | |
| com.osp.app.signin | 1.4.0349 | Android | |
| com.osp.app.signin | 1.4.0345 | Android | |
| com.osp.app.signin | 1.4.0343 | Android | |
| com.osp.app.signin | 1.4.0335 | Android | |
| com.osp.app.signin | 1.4.0321 | Android | |
| com.osp.app.signin | 1.4.0317 | Android | |
| com.osp.app.signin | 1.4.0309 | Android | |
| com.osp.app.signin | 1.4.0299 | Android | |
| com.osp.app.signin | 1.4.0250 | Android | |
| com.osp.app.signin | 1.4.0237 | Android | |
| com.osp.app.signin | 1.4.0236 | Android | |
| com.osp.app.signin | 1.4.0235 | Android | |
| com.osp.app.signin | 1.4.0230 | Android | |
| com.osp.app.signin | 1.4.0216 | Android | |
| com.osp.app.signin | 1.4.0214 | Android | |
| com.osp.app.signin | 1.4.0208 | Android | |
| com.osp.app.signin | 1.4.0202 | Android | |
| com.osp.app.signin | 1.4.0200 | Android | |
| com.osp.app.signin | 1.4.0142 | Android | |
| com.osp.app.signin | 1.4.0139 | Android | |
| com.osp.app.signin | 1.4.0134 | Android | |
| com.osp.app.signin | 1.4.0126 | Android | |
| com.osp.app.signin | 1.4.0124 | Android | |
| com.osp.app.signin | 1.4.0117 | Android | |
| com.osp.app.signin | 1.4.0116 | Android | |
| com.osp.app.signin | 1.4.0111 | Android | |
| com.osp.app.signin | 1.4.0109 | Android | |
| com.osp.app.signin | 1.4.0081 | Android | |
| com.osp.app.signin | 1.4.0077 | Android | |
| com.osp.app.signin | 1.4.0074 | Android | |
| com.osp.app.signin | 1.4.0063 | Android | |
| com.osp.app.signin | 1.4.0062 | Android | |
| com.osp.app.signin | 1.4.0053 | Android | |
| com.osp.app.signin | 1.4.0040 | Android | |
| com.osp.app.signin | 1.4.0032 | Android | |
| com.osp.app.signin | 1.4.0014 | Android | |
| com.osp.app.signin | 1.4.0013 | Android | |
| com.osp.app.signin | 1.3.0870 | Android | |
| com.osp.app.signin | 1.3.0859 | Android | |
| com.osp.app.signin | 1.3.0857 | Android | |
| com.osp.app.signin | 1.3.0856 | Android | |
| com.osp.app.signin | 1.3.0853 | Android | |
| com.osp.app.signin | 1.3.0849 | Android | |
| com.osp.app.signin | 1.3.0848 | Android | |
| com.osp.app.signin | 1.3.0846 | Android | |
| com.osp.app.signin | 1.3.0844 | Android | |
| com.osp.app.signin | 1.3.0838 | Android | |
| com.osp.app.signin | 1.3.0835 | Android | |
| com.osp.app.signin | 1.3.0831 | Android | |
| com.osp.app.signin | 1.3.079 | Android | |
| com.osp.app.signin | 1.3.069 | Android | |
| com.osp.app.signin | 1.3.068 | Android | |
| com.osp.app.signin | 1.3.064 | Android | |
| com.osp.app.signin | 1.3.060 | Android | |
| com.osp.app.signin | 1.3.056 | Android | |
| com.osp.app.signin | 1.3.053 | Android | |
| com.osp.app.signin | 1.3.048 | Android | |
| com.osp.app.signin | 1.3.046 | Android | |
| com.osp.app.signin | 1.3.024 | Android | |
| com.osp.app.signin | 1.2.157 | Android |
