Holiday Gift Guide »

Malicious image could affects security of Moto’s RAZR

Categories: Motorola, Security
By: , IntoMobile
Tuesday, June 3rd, 2008 at 11:27 AM

r.png

You could have some issues if you accept a JPEG from strangers to your RAZR, according to CNET News….

A vulnerability has been discovered in the phones that could allow a hacker to send a corrupt JPEG image via Multimedia Messaging Service that could be leveraged to run malicious code on the phone. However, you would have to accept the image for download before that could happen. The specific flaw exists in the JPEG thumbprint component of the EXIF parser, according to an advisory released by security firm TippingPoint’s Zero Day Initiative on Tuesday.

Motorola has apparently fixed the vulnerability in new software available on it’s website, and is urging people to download this. I wonder though, what exactly this vulnerability (which isn’t new by the way) allows people to do? “Executing arbitrary code” isn’t exactly clear now, is it?

Anyhow, if you want to get the new software, you can go here.

[Via: CNET News]

About The Author

Ben Robinson

Ben is a 10+ year veteran of the Mobile industry – starting his career when SMS was a still a relatively new concept for most people (!), he has now consulted on everything from bleeding-edge Mobile content, to the next-gen accessories you might view it on. As a result he has a broad and deep knowledge in numerous areas of Mobile – from network operators to device vendors, to infrastructure and middleware vendors (not to mention content delivery) – and has worked for companies in all of these areas! He is based in the UK, a hotbed of activity for mobile, and recently became a father for the second time – as oppose to in his younger years when he was happy spend time tweaking all manner of mobile devices to 'nth' degree, he now looks for services and hardware that provide the most efficient, compact, and reliable improvements to his already manic life! It’s his opinion that Mobile solutions should be there to help to make your life better – if a particular solution (be it service or device) isn’t doing this, he believes you need to ask the very important question of why you continue to use it... His focus at IntoMobile is mainly on Mobile content, services, and infrastructure, particularly as regards the UK market – and with the occasional look at devices. Additionally, using his extensive experience in the industry, he will provide commentary on the industry at large, with regular (and hopefully thought-provoking) articles.