Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.
MMS exploit in the wild for Windows Mobile devices
Posted on 31-Dec-2006 07:36 | Filed under: News



The Symantec Security Response Weblog has posted a note warning that an exploit is in the wild that uses the multimedia messaging service (MMS) as a vector. MMS are similar to the SMS but carry multimedia information such as text, sound, pictures and short videos.

The warning is a follow up on a previously disclosed vulnerability found by researcher Collin Mulliner, who gave an updated version of his presentation titled "Advanced Attacks Against PocketPC Phones".

One of the vulnerabilities he discussed had not been patched, and since Collin has released a working exploit for the vulnerability. A malformed MMS message can execute arbitrary code on a mobile device, simply by having a user view the message.

Messages sent through MMS to mobile devices can cause the device to freeze due to flaw on rendering content.

The Symantec blog claims the vulnerability has been publicly disclosed for over six months and there is no patch for it.

One of the recommendations is to install firmware updates when available, but the blog fails to mention that this is not an OS vulnerability, since MMS clients on Windows Mobile are supplied by third party developers. The client is generally available from manufacturers and consumers should put pressure on these to have the software updated.






More information: http://www.symantec.com/enterprise/security_r...






Trending now »

Hot discussions in our forums right now:

2019 Novel Coronavirus Covid-19 Discussion
Created by Batman, last reply by Batman on 1-Oct-2020 21:22 (15190 replies)
Pages... 1011 1012 1013


When did PeterReader start spamming the forums?
Created by BlueShift, last reply by PeterReader on 29-Sep-2020 16:11 (18 replies)
Pages... 2


Orcon price increase
Created by OldGeek, last reply by nztim on 1-Oct-2020 22:19 (16 replies)
Pages... 2


Another experiment - or just a placebo?
Created by freitasm, last reply by dfnt on 30-Sep-2020 20:40 (15 replies)

Interior house paint - recommended brands/quality differences?
Created by jonathan18, last reply by timmmay on 29-Sep-2020 10:43 (27 replies)
Pages... 2


Lawn Mower Issue - Easy Fix?
Created by networkn, last reply by Bung on 1-Oct-2020 22:30 (37 replies)
Pages... 2 3


Adding killfile support to Geekzone
Created by neb, last reply by richms on 1-Oct-2020 19:52 (12 replies)

WISP latency in 2020?
Created by Obraik, last reply by Obraik on 1-Oct-2020 21:09 (11 replies)