CVE-2009-2815

The Telephony component in Apple iPhone OS before 3.1 does not properly handle SMS arrival notifications, which allows remote attackers to cause a denial of service NULL pointer dereference and service interruption via a crafted SMS message...

Apple iPhone短信消息远程内存破坏漏洞

BUGTRAQ ID: 35569 CVECAN ID: CVE-2009-2204,CVE-2009-2315 Apple iPhone是苹果最新发布的智能手机。 iPhone手机在解码短信消息时存在内存破坏漏洞，远程攻击者可以通过发送恶意短信导致执行任何代码、获取GPS坐标或启用话筒。 Apple iPhone 3.0 厂商补丁： Apple ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.apple.com...

Memory corruption

Unspecified vulnerability in the CoreTelephony component in Apple iPhone OS before 3.0.1 allows remote attackers to execute arbitrary code, obtain GPS coordinates, or enable the microphone via an SMS message that triggers memory corruption, as demonstrated by Charlie Miller at SyScan '09 Singapor...

CVE-2009-2656

Unspecified vulnerability in the com.android.phone process in Android 1.0, 1.1, and 1.5 allows remote attackers to cause a denial of service network disconnection via a crafted SMS message, as demonstrated by Collin Mulliner and Charlie Miller at Black Hat USA 2009...

CVE-2009-2204

Unspecified vulnerability in the CoreTelephony component in Apple iPhone OS before 3.0.1 allows remote attackers to execute arbitrary code, obtain GPS coordinates, or enable the microphone via an SMS message that triggers memory corruption, as demonstrated by Charlie Miller at SyScan '09 Singapor...

CVE-2009-2204

Unspecified vulnerability in the CoreTelephony component in Apple iPhone OS before 3.0.1 allows remote attackers to execute arbitrary code, obtain GPS coordinates, or enable the microphone via an SMS message that triggers memory corruption, as demonstrated by Charlie Miller at SyScan '09 Singapor...

CVE-2009-2656

The CVE-2009-2656 entry concerns an unspecified vulnerability in the com.android.phone process on Android 1.0/1.1/1.5 that allows remote attackers to cause a denial of service (network disconnection) by sending a crafted SMS. The issue was demonstrated by Collin Mulliner and Charlie Miller at Bla...

CVE-2009-2204

CVE-2009-2204 affects Apple iPhone OS prior to 3.0.1 in the CoreTelephony component. A memory-corruption flaw triggered by an SMS can enable remote code execution and expose GPS coordinates or enable the microphone, as demonstrated by Charlie Miller at SyScan ’09. A patch addressing this issue wa...

CVE-2009-2656

Unspecified vulnerability in the com.android.phone process in Android 1.0, 1.1, and 1.5 allows remote attackers to cause a denial of service network disconnection via a crafted SMS message, as demonstrated by Collin Mulliner and Charlie Miller at Black Hat USA 2009...

HTC Touch 3G Windows Mobile/Open Handset Alliance Android SMS远程拒绝服务漏洞

HTC Touch 3G Windows Mobile是一款使用Windows Mobile操作系统的智能手机。Open Handset Alliance Android是一款超过30家科技与移动电话公司所组成的团体开发的免费的移动电话平台。 HTC Touch 3G Windows Mobile/Open Handset Alliance Android不正确处理特殊构建的SMS消息，远程攻击者可以利用漏洞关闭设备的用户接口，使设备从网络中断开，导致拒绝服务攻击。 Microsoft Windows Mobile Professional 6.1 Microsoft Windows...

Researchers Reveal Fundamental SMS Flaws at Black Hat

There are several architectural and implementation problems in mobile phone networks that can be used to force users to open malicious files, allow attackers to gain control of users’ phones and change phone settings to redirect mobile Internet traffic to a proxy controlled by the attackers. In a...

New Mobile Malware Transmitter.C Spreading

From Zero Day Dancho Danchev Researchers from NetQin Tech. are reporting on a newly discovered mobile malware variant Transmitter.C distributed through a modified version of legitimate mobile application. Upon execution, the malware attempts to automatically spread by SMS-ing hundreds of messages...

Apple iPhone memory corruption

Memory corruption on SMS messages parsing...

Apple Working to Fix Serious iPhone SMS Flaw

From IDG News Service Sumner Lemon Apple is working to fix an iPhone vulnerability that could allow an attacker to remotely install and run unsigned software code with root access to the phone. The attack in question exploits a weakness in the way iPhones handle text messages received via SMS Sho...

New SMS Hacking Tool Coming at Black Hat

From DarkReading Kelly Jackson Higgins Texting just keeps getting riskier: Researchers at next month’s Black Hat USA in Las Vegas will demonstrate newly discovered threats to mobile phone users, as well as release a new iPhone application that tests phones for security flaws. “We set out to creat...

CVE-2008-6775

HTC Touch Pro and HTC Touch Cruise vCard allows remote attackers to cause denial of service CPU consumption, SMS consumption, and connectivity loss via a flood of vCards to UDP port 9204...

三星M8800 Innov8和SGH-J750手机SMS Provisioning消息绕过认证漏洞

BUGTRAQ ID: 34705 M8800 Innov8和SGH-J750都是三星所出品的智能手机。 M8800 Innov8和SGH-J750手机没有向用户显示provisioning消息的来源；接受了消息体中不存在SEC和MAC参数的未经认证SMS Provisioning消息；即使接受了消息体中存在SEC和MAC参数的已认证SMS Provisioning消息，也没有对参数执安全检查。如果远程攻击者发送了上述类型的provisioning消息的话，就可能扮演为合法的来源，诱骗用户安装恶意配置。 Samsung SGH-J750 Samsung M8800 Innov8...

Samsung cellular phones unauthorized access

SMS Provisioning messages are not authenticated, allowing device configuration, including PIN codes change...

MSL-2009-001 - Samsung Missing Provisioning Authentication

Security Advisory MSL-2009-001 - Samsung Missing Provisioning Authentication Advisory Information -------------------- Title: Samsung Missing Provisioning Authentication Advisory ID: MSL-2009-001 Advisory URL: http://www.mseclab.com/index.php?pageid=148 Published: 2009-04-23 Updated: 2009-04-23...

New ransomware locks PCs, demands premium SMS for removal

From ZDNet Dancho Danchev PandaLabs is reporting on a newly discovered ransomware variant pandasecurity.comwhich locks the affected user’s PC, and demands a premium SMS in order to deactivate it. The ransomware doesn’t have any self-propagation functions and appears to be coming under the form of...