|
|
 Mobile Windows News |  Podcasts |  Videos | Search | Forums | Site News |
|
Symantec claims that Windows Mobile is susceptible to virus programs due to Remote Code Execution August 08, 2006 [General] | By Edward J. R. Companies making anti-virus software are working hard to prove, that it is possible to write virus programs for Windows Mobile, although in reality it is Symbian, not Windows Mobile, that has been infected by virus programs several times... Ollie Whitehouse from Symantec writes: Remote Code Execution on Windows Mobile Demonstrated [...] at DefCon this past weekend, Collin Mulliner demonstrated a remote code execution flaw via MMS on Windows CE. Colin's slides show how he used a malformed MMS message to achieve arbitrary code execution on a device, simply by having a user view the message. This is obviously of great concern; Windows Mobile devices are becoming more and more prevalent and the substantial challenges with patching continue to exist. At the end of 2005, the Symantec Advanced Threat Research team performed a detailed attack surface analysis of Windows CE 5. We took a very broad and a very deep look as to how attacks could target Windows CE (and thus Windows Mobile) devices both from a remote perspective, as well as a local privilege escalation perspective (CE 5 includes the concept of trusted versus un-trusted applications). This research included documenting all of the remote attack vectors that could potentially exist. During the course of the research, as you would expect, we found a number of remote code execution flaws that could be leveraged in a malicious fashion. While we won't be disclosing the specific flaws just yet, what we will discuss is the overall security architecture of CE5, the types of vulnerabilities we discovered, how these impact mobile devices, and what, if anything, people can do to protect themselves. Please keep your eyes peeled for the announcement of when and where we will be presenting this research. To learn more click here.  Post your comment (free registration is required to post, but if you register you can edit your posts later)
   |
| ||||||
| Mobile Windows News | Podcasts | Videos | Search | Forums | Site News |
