Vulnerability Found in Windows Mobile

By Ed Oswald | Published January 31, 2007, 4:46 PM

Flaws within the Windows Mobile operating system could cause phones to crash, security firm Trend Micro said in a pair of advisories. One deals with Internet Explorer, while the other involves the Pictures & Videos application.

In each case, devices running these programs and opening either a specially crafted Web page or JPEG image file could be susceptible to a denial-of-service attack. Microsoft has been alerted to the issue, and the firm will not release details of the flaw.

Versions affected include Windows Mobile 2003 and 5.0. In the case of the Picures & Videos flaw, the device would lock up for approximately 10-15 minutes while it attempts to process the file. No error messages would be given during this period.

The flaw in Internet Explorer would cause a stack overflow, which in turn would cause IE to terminate. The device would become unstable, and would require a reset to begin using IE, and the device, normally.

No patches are currently available for either issue. In the case of the IE advisory, Trend Micro recommends keeping the device updated with the latest firmware, as well as avoiding untrusted or questionable sites.

Virus threats for mobile phones are relatively low, however experts expect this to increase with increased usage of smartphones. The expected risk has prompted several antivirus firms to begin offering mobile versions of their software, and Trend Micro is one of those companies.

Comments

View comments by with a score of at least

Ohh, those updates that some mobile providers CHARGE for?

Thanks, but I keep my phone away from a version of Windows

(Ex XDA user)

Score: 0

|

yawn...

Only one?

Score: 0

|

It's the US vs. the EU over Oracle+Sun and the meaning of 'open source'

Now that the EU is a virtual country, the US Justice Dept. is taking a stand in favor of its view -- and against the EC's -- that MySQL will survive under Oracle.

Qualcomm: $1.3 billion Samsung licensing deal unrelated to fair trade violations

Samsung has come to a 15-year licensing deal with Qualcomm over 3G and 4G wireless technology.

Firefox turns five: Thanks for giving us a choice

Carmi Levy | Wide Angle Zoom: No longer the phoenix rising from the ashes, Mozilla has carried on more than just Netscape's legacy.

If Microsoft sites lead time online, pigs can fly

How can people spend more time at Microsoft sites, when the measure of success is Windows Live Messenger, which sits on the desktop?

Kindle for PC opens in beta, underwhelms

Amazon has opened the beta of Kindle for PC, a companion to the Kindle, but little else.

European ministers approve watered-down 'neutral net' language

The latest provision in the EU's telecoms regulatory framework would let businesses cancel individuals' Internet access, if they go to court first.

Snow Leopard and Windows 7 still can't crack the netbook problem

Apple has killed Atom support in OS X 10.6.2 and Windows 7 Starter Edition is stripped of "basic" functionality.

Microsoft's Top 3 advances in Exchange Server 2010

The latest round of changes launched today will impact how admins deliver services to e-mail recipients, and how much companies will pay along the way.

Nokia's 'limited number' of recalled chargers exceeds 14 million

Today, the Finnish phone maker has begun a recall of mobile phone chargers that are a shock hazard.

Ubuntu 9.10 upgraders report frustration

For those Wine aficionados out there, beware of the remote possibility that your Linux system could be infected by Windows-seeking malware.

Supreme Court considers patentability of abstract methods today

Can software that executes a formula for a business process qualify for federal patents? An appeals court already said no, and inventors are making their case.