Thursday 15 December 2011

SMS Attack Vulnerability In Windows Phone 7.5



Khaled Salameh discovered a serious vulnerability on Windows phone 7.5 "Mango". He reported this vulnerability to WinRumors & Microsft.  If and when a security patch will be released from Microsoft's end to fix the issue is still unclear.
In an exclusive report it has been said that the Messaging Hub on Windows Phone 7.5 "Mango" devices can be completely disabled using a specially crafted SMS message. When a Windows Phone device receives the message, it causes the device to reboot and prevents the Messaging Hub from loading despite repeat attempts to open it. This Denial-of-Service (DoS) attack can also be exploited by sending a message from Facebook chat or Windows Live Messenger to the phone.

Video Demonstration:- 



Tom Warren fo WinRumor says that the only way to fix a device affected by the problem is to perform a hard reset and wipe the device, during which all personal data will be lost. They have also tested the attack on several phones such as the HTC TITIAN and the Samsung Focus Flash. These included devices running the 7740 build (7.10.7740.16) of Windows Phone 7.5 and Mango RTM build 7720 (7.10.7720.68).

Related Posts Plugin for WordPress, Blogger...
Back to TOP