TL;DR
http://blog.trendmicro.com/trendlabs-security-intelligence/two-new-android-bugs-mess-up-messaging-may-lead-to-multiple-send-charges/
- CVE-2015-3839 - SMS causing crash
- CVE-2015-3840 - Tamper with sent/received statuses of SMS and MMS - > multiple charges $$
- Unlike Stagefright, that attacks mediaserver, attack messaging components.
- All versions, incl. 5.1.1 Lollipop, affects Vanilla more
- End users should consider using alternate messaging apps while patches are underway
- Detecting CVE-2015-3839 as AndroidOS_MsgDoS.A
- Detecting CVE-2015-3840 as AndroidOS_MsgCrack.A.
http://blog.trendmicro.com/trendlabs-security-intelligence/two-new-android-bugs-mess-up-messaging-may-lead-to-multiple-send-charges/
