WAP Push SI Impersonation

Security Advisory: Multiple Smartphones SMS Sender Obfuscation via WAP Push SI ------------------------------------------------------------------------------ Discovered by: Michael Mueller a.k.a. c0rnholio Contact: c0rnholio on domain netcologne.de Advisory Homepage:...

Google Android Security Chief: Smartphone Attacks on the Way

As smartphones become even smarter, they are going to attract more and more attention from attackers, spammers and others looking to take control of the billions of mobile devices in use today, the head of Google’s Android security team said. In a talk at the USENIX Security symposium Wednesday,...

How to Plan for Smartphone Security in the Enterprise

From eWEEK Chris De Herrera One of the major challenges CIOs face is the deployment and security of smartphones in the enterprise. It’s important for CIOs to assess how their organization should secure the smartphones employees use to access corporate resources. Here, Knowledge Center contributor...

iPhone security comes to the fore

By Paul F. Roberts, The 451 Group The security of smartphones such as the iPhone, Windows Mobile devices and the T-Mobile G1 has come under a lot of scrutiny lately. Each device has its own unique security model, and in the case of the iPhone, Apple has kept its platform closed to third-party...

Android, iPhone security under scrutiny at CanSecWest

A parade of security researchers spent the better part of Wednesday at the CanSecWest conference putting the lie to the notion that iPhones, Windows Mobile devices and other smartphones are not really targets for attackers. “Smartphones are a very nice thing to go after from an attacker’s point o...

Nokia N95-8 browser (setAttributeNode) Method Crash Exploit

No description provided by source. Application: Nokia N95-8 OS: Symbian ------------------------------------------------------ 1 - Description 2 - Vulnerability 3 - POC/EXPLOIT ------------------------------------------------------ Description The nokia n95 is a smartphone, this phone have more...

Nokia N95-8 (JPG File) Remote Crash PoC

No description provided by source. Application: Nokia N95-8 OS: Symbian ------------------------------------------------------ 1 - Description 2 - Vulnerability 3 - POC/EXPLOIT ------------------------------------------------------ Description The nokia n95 is a smartphone, this phone have more...

Nokia N95-8 browser denial of service

Application: Nokia N95-8 OS: Symbian ------------------------------------------------------ 1 - Description 2 - Vulnerability 3 - POC/EXPLOIT ------------------------------------------------------ Description The nokia n95 is a smartphone, this phone have more tools, for example:...

BlackBerry Enterprise Server / Unite! PDF Distiller Component Vulnerabilities (KB17118 / KB17119)

The version of BlackBerry Enterprise Server / BlackBerry Unite! on the remote host reportedly contains several vulnerabilities in the PDF distiller component of the BlackBerry Attachment Service : - A heap-based buffer overflow triggered when parsing a certain stream inside a PDF file. - A...

Palm Treo智能手机远程拒绝服务漏洞

BUGTRAQ ID: 25074 CVECAN ID: CVE-2007-4213 Treo系列是运行Palm操作系统的智能手机。 Treo手机在处理ICMP请求时存在漏洞，远程攻击者可能利用此漏洞导致设备不可用。 如果运行Palm操作系统的Treo手机连接到了数据网络并允许入站ICMP通讯的话，攻击者就可以通过向为手机所分配的IP地址连续发送大小为1470字节的ICMP回显请求导致设备待机、软重启或断开连接。降低报文大小但增加发送间隔时间也可以实现同样的效果。 Palm Treo Smartphone 755p Palm Treo Smartphone 700p Palm Treo...

SYMSA-2007-002: Palm OS Treo Find Feature System Password Bypass

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Symantec Vulnerability Research http://www.symantec.com/research Security Advisory Advisory ID: SYMSA-2007-002 Advisory Title: Palm OS Treo Find Feature System Password Bypass Authors: J.R. Wikes, Matt Cooley, & Scott King Release Date: 14-02-2007...

Unfixed XSS vulnerability at www.smartphone.net

Security researcher Kaospunk, has submitted on 02/11/2007 a cross-site-scripting XSS vulnerability affecting www.smartphone.net, which at the time of submission ranked 77655 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 05/11/2007. It is...