Lucene search
K

Total Multimedia Features DoS PoC for Sony Ericsson Phones

🗓️ 01 Jul 2014 00:00:00Reported by RootType 
seebug
 seebug
🔗 www.seebug.org👁 17 Views

Total Multimedia Features DoS PoC for Sony Ericsson Phones. Vulnerability allows malicious files to render multimedia features inoperable

Code

                                                Total Multimedia Features DoS PoC for Sony Ericsson Phones.
(Should work on almost all of their Models)
By Aodrulez.

   In Sony Ericsson phones(tested on w800i,k750i,w810i),
if you simply rename a File with a ".sest" extension,
it achieves "System" File status.This file can't be deleted,
nor renamed or edited by any means By the Phone.The only way
to remove or rename those files is to connect the phone to 
your Personal Computer & then rename them.
	Folders such as Images Folder,Videos Folder etc,if
renamed in Foldername.sest format, then this folder attains
System Folder status, & no matter how many files are present
in it, they become totally invisible.When you try to open these
folders in the phone, it says "No Files in this folder" even when
in reality files are present in it.
	Using this Vulnerability, you can totally disable all the
Multimedia features of these phones.
	J2me applications are capable of causing this Filesystem DoS
effect.A PoC of this DoS Function, is the "VooDoo" function of my
J2me File protection application "The Messiah" that am attaching.

------------------------------------------------------------------
Greetz Fly out to:
1]LiquidWorm.
2]Amforked().
3]www.Orchidseven.com
4]www.isac.org.in
------------------------------------------------------------------
By:
	   Aodrulez,
   www.OrchidSeven.com,
   aodrulez.blogspot.com.
Email : [email protected]

===============
Download
===============
http://www.exploit-db.com/sploits/Sony_Ericsson.rar
                              

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

01 Jul 2014 00:00Current
7.1High risk
Vulners AI Score7.1
17