MMS exploit targets Windows Mobile 2003

What's scarier than a text message luring you into getting your PC all hosed up with virii? An MMS message that somehow manages to do the infection honors all by its lonesome, that's what. Details are now emerging on what appears to be the world's first proof of concept for an MMS virus, exploiting a weakness in the way Windows Mobile 2003 handles SMIL (Synchronized Mutlimedia Integration Language) to cause a buffer overflow -- which in turn leads to the dreaded "arbitrary code execution." The fella responsible for the exploit apparently gave Microsoft the heads-up a solid six months ago; when he never heard back, he went public with it in a big way at Berlin's Chaos Communication Congress. The good news (if you can call it that) is that it's only been tested on the i-mate PDA2K and HP iPaq h6315, both of which are approaching the tail ends of their useful shelf lives. No word on whether the vulnerability applies (or can be easily adapted to) Windows Mobile 2005, but somehow, "we hope not" simply doesn't properly express our sentiments.

[Via El Reg]

[(Unverified) Posted Jan 2nd 2007 3:52PM]

"Virii" is not a word. It does not make you look cool. Viruses is the plural form of virus. That's it. "Vir" is Latin for man, "viri" is Latin for "men."

http://en.wikipedia.org/wiki/Plural_of_virus

[(Unverified) Posted Jan 3rd 2007 9:40AM]

Well, it's a good thing the Rogers Wireless (Canada) hasn't been able to figure out MMS on Windows Mobile devices. It's never worked at all, so I guess I'm safe...

[(Unverified) Posted Jan 2nd 2007 4:28PM]

1. "Virii" is not a word. It does not make you look cool. Viruses is the plural form of virus. That's it. "Vir" is Latin for man, "viri" is Latin for "men."

http://en.wikipedia.org/wiki/Plural_of_virus

Eric my friend, you are a worm...

[(Unverified) Posted Jan 3rd 2007 12:01AM]

MS are C*nts.. they never listen.. fark them!

[(Unverified) Posted Jan 2nd 2007 11:07PM]

Scientific American has a good article this month about these scary little suckers. But could we rework the anti-virus business model for smartphones & pocket pcs? I think the handset manufacturer should be responsible for making up-to-date anti-virus software available. Anyone agree?

[(Unverified) Posted Jan 2nd 2007 9:15PM]

Ummm...And who uses WM03 anymore? Hell, Crossbow is already out. And I'm assuming that it doesn't have this sploit.

So, I have to ask, who cares? Why would MS update such an old OS? Do they update 98 anymore?