|
Vulnerabilities found in Sony Ericsson phones
|
Posted by dan on: 2006-02-10 08:41:53 Article Viewed : 621
|
Several cell phones produced by Sony Ericsson Mobile Communications are vulnerable to denial-of-service attacks, two security companies reported this week.
The flaw is found in four models of Sony Ericsson phones and comes from an error in their BlueTooth service, according to the French Security Incident Response Team, or FrSIRT.
The BlueTooth "fails to properly handle malformed L2CAP (Logical Link Control and Adaptation Layer Protocol)," FrSIRT, a France-based security company, said in an advisory posted on its Web site.
Danish security firm Secunia reported the same flaw, and both companies have rated the potential security risk as low. Thomas Kristensen, Secunia's chief technology officer, said that someone intent on knocking out one of the four Sony Ericsson phones, which includes the K600i and T68i, would only need to get within 50 feet while carrying a handheld device configured to send the malicious code via BlueTooth. The code would crash the phone.
"I don't think the phone's user would even know the attack occurred until they tried to use their phone again," Kristensen said.
The good news is that damage would be minimal. Once the phone was turned off and restarted, it would function normally again, Kristensen said.
News Source C|Net
|
|
