get the ALL the lastest news! Mobile Windows News | Windows Mobile podcast Podcasts | videos about Windows Mobile phones and more Videos | Search | Forums | Site News


Code of MMS Exploit for Windows Mobile released - but STILL no patch available
December 30, 2006 [General] | By Edward J. R.

Bascially the actual code required to exploit a security vulnerability in the MMS client on Windows Mobile has been released.

Shortly speaking: now malware writers can use that code and write such software that upon opening of MMS message is getting access to all your data.

Collin confirmed this in his presentation and also released a working exploit for the vulnerability to liven things up a little.

So let’s summarize:
  • There has been a publicly disclosed vulnerability for over six months now
  • There is no patch for this vulnerability
  • There is an exploit now out there
  • There is no easy way to patch the vulnerable devices due to the lack of auto updates (try explaining what a firmware update is to your parents)
[...]

Collin also mentions in his presentation, “User only needs to view the message to trigger exploit.” So I would add, only view MMSs from trusted sources.


To learn more or to download the code click here.

To download the exploit directly click here.

Clearly this vulnerability is being ignored by everybody - Microsoft, hardware manufacturers, mobile operators and distributors - probably because most users of Windows Mobile phones is using rather email than MMS anyway...


Discuss this item in the forumsPost your comment (free registration is required to post, but if you register you can edit your posts later) [ 11 Comments ]



If you need help with Microsoft cellphones or you have some feedback, then leave us voicemail at Skype!!!

<< Previous Story Next Story >>

visit NewsNow! read msmobiles.com off-line in your Symbian, Palm or Windows Mobile device with use of AvantGo client!
visit us to get regularly also some unique content, not available  elsewhere!

Help us by submitting news!
Some of our Reviews
(phones):








Some of our Reviews
(software):

3G video calling
Live Messenger
MS Push Email
SlingPlayer over WiFi
SlingPlayer over UMTS
Opera browser

  get the ALL the lastest news! Mobile Windows News | Windows Mobile podcast Podcasts | videos about Windows Mobile phones and more Videos | Search | Forums | Site News

Submit news | Contact us | Windows Mobile podcasts | All Windows Mobile news | RSS/XML Feed

Our friends: MoDaCoCoolSmartphone.comSmartphoneThoughtsMobiusBink.nu - Microsoft news,  pdaPhoneHome.com.

Copyright © 2002-2009 by msmobiles.com. All rights reserved.
This site is not affiliated with Microsoft Corporation.