Patch the system against the Fake ID vulnerability (bug 13678484)
Requires the
Xposed Framework
. Grab it at http://forum.xda-developers.com/xposed/xposed-installer-versions-changelog-t2714053 and make sure it runs properly on your device.
ROOT
only required for installing the Xposed Framework, it can be dropped afterwards.
This app won't do anything without Xposed (not even appear on the launcher).
A great explanation of this vulnerability that currently affects most Android devices can be found on this article by Jeff Forristal from Bluebox: http://bluebox.com/technical/android-fake-id-vulnerability/
To detect if your system is vulnerable you can use Bluebox Security Scanner: https://play.google.com/store/apps/details?id=com.bluebox.labs.onerootscanner
For any questions or to support my work, please visit http://forum.xda-developers.com/xposed/modules/mod-fakeid-vulnerability-fix-t2833854