MMS Exploit Released for Windows Mobile – No Patch Available
Posted by Jack Cook on 12/30/06 in Pocket PC Phones
Geekzone reported today that the Symantec Security Response Weblog has posted a note warning that an exploit is in the wild that uses the multimedia messaging service (MMS) as a vector. MMS are similar to the SMS but carry multimedia information such as text, sound, pictures and short videos.
The warning is a follow up on a previously disclosed vulnerability found by researcher Collin Mulliner, who gave an updated version of his presentation titled "Advanced Attacks Against PocketPC Phones".
In summary:
• There has been a publicly disclosed vulnerability for over six months now
• There is no patch for this vulnerability
• There is an exploit now out there
• There is no easy way to patch the vulnerable devices due to the lack of auto updates (try explaining what a firmware update is to your parents)
































Leave a Reply