US-CERT Issues Vulnerability Alert for Android Devices

Android devices running versions 2.2 through 5.1.1_r4 contain vulnerabilities in the Stagefright media playback engine that may allow an attacker to access multimedia files or potentially take control of a vulnerable device, said an alert from the U.S. Computer Emergency Readiness Team Tuesday. Users and administrators are encouraged to review the Vulnerability Note for more information, the alert said. Affected Android users should contact their wireless carrier or device manufacturer for a software update, it said.