Re: [FD] Xamarin for Android <5.1 DLL Hijack Vulnerability

2015-05-19 Thread ValdikSS
I had no idea they have one. All communication with Xamarin was over email at he...@xamarin.com. On 05/20/2015 12:38 AM, Tim wrote: > Isn't this the public bug tracker? > > https://bugzilla.xamarin.com/describecomponents.cgi?product=Android > > Though, correct that case id doesn't map to anything

Re: [FD] Xamarin for Android <5.1 DLL Hijack Vulnerability

2015-05-19 Thread Tim
Isn't this the public bug tracker? https://bugzilla.xamarin.com/describecomponents.cgi?product=Android Though, correct that case id doesn't map to anything there. -Tim Strazzere On Tue, May 19, 2015 at 2:32 PM, ValdikSS wrote: > They don't have public bugtracker. Case ID is 140518. > > On 05

Re: [FD] Xamarin for Android <5.1 DLL Hijack Vulnerability

2015-05-19 Thread ValdikSS
They don't have public bugtracker. Case ID is 140518. On 05/20/2015 12:29 AM, Tim wrote: > Thanks for posting this to FD, these didn't even include it in their release > notes; > > http://developer.xamarin.com/releases/android/xamarin.android_5/xamarin.android_5.1/ > > Was there a bug reported in

Re: [FD] Xamarin for Android <5.1 DLL Hijack Vulnerability

2015-05-19 Thread Tim
Thanks for posting this to FD, these didn't even include it in their release notes; http://developer.xamarin.com/releases/android/xamarin.android_5/xamarin.android_5.1/ Was there a bug reported in bugzilla to link back too? -Tim Strazzere On Tue, May 19, 2015 at 6:49 AM, ValdikSS wrote: > > -

[FD] Xamarin for Android <5.1 DLL Hijack Vulnerability

2015-05-19 Thread ValdikSS
-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Xamarin for Android prior to version 5.1 allows to replace internal DLL files inside the APK with files on SD card which are not in a secure storage. Malicious application without any special permissions could drop backdoored DLL files into /stor