Geekzone: technology news, blogs, forums
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.
MMS exploit in the wild for Windows Mobile devices
Posted on 31-Dec-2006 07:36. | Tags Filed under: News.

The Symantec Security Response Weblog has posted a note warning that an exploit is in the wild that uses the multimedia messaging service (MMS) as a vector. MMS are similar to the SMS but carry multimedia information such as text, sound, pictures and short videos.

The warning is a follow up on a previously disclosed vulnerability found by researcher Collin Mulliner, who gave an updated version of his presentation titled "Advanced Attacks Against PocketPC Phones".

One of the vulnerabilities he discussed had not been patched, and since Collin has released a working exploit for the vulnerability. A malformed MMS message can execute arbitrary code on a mobile device, simply by having a user view the message.

Messages sent through MMS to mobile devices can cause the device to freeze due to flaw on rendering content.

The Symantec blog claims the vulnerability has been publicly disclosed for over six months and there is no patch for it.

One of the recommendations is to install firmware updates when available, but the blog fails to mention that this is not an OS vulnerability, since MMS clients on Windows Mobile are supplied by third party developers. The client is generally available from manufacturers and consumers should put pressure on these to have the software updated.

More information:

comments powered by Disqus

Trending now »

Hot discussions in our forums right now:

Rise of the machines
Created by Rikkitic, last reply by PhantomNVD on 23-Oct-2016 22:31 (22 replies)
Pages... 2

Sony XZ Owners discussion
Created by networkn, last reply by Geektastic on 23-Oct-2016 22:48 (104 replies)
Pages... 5 6 7

Gigabit cable now available
Created by sub, last reply by Pumpedd on 23-Oct-2016 10:48 (59 replies)
Pages... 2 3 4

Who is this women? She is possibly the most famous women on the internet and nobody knows who she is.
Created by jimbob79, last reply by cynnicallemon on 20-Oct-2016 13:28 (14 replies)

Labour weekend plans?
Created by DarthKermit, last reply by joker97 on 22-Oct-2016 09:51 (27 replies)
Pages... 2

Is windows 10 anniversary update causing you problems
Created by robjg63, last reply by mdav056 on 20-Oct-2016 14:01 (27 replies)
Pages... 2

Windows 10: HDMI or DP to connect to 4K monitor?
Created by joker97, last reply by joker97 on 23-Oct-2016 19:04 (12 replies)

Does anyone use Ebay?
Created by TeaLeaf, last reply by tchart on 23-Oct-2016 19:36 (23 replies)
Pages... 2