The issue allows remote attackers to execute arbitrary code, cause a denial of service, or read sensitive data, such as the SMS database, via vectors related to attribute manipulation. This was demonstrated by Vincenzo Iozzo and Ralf Philipp Weinmann during a Pwn2Own competition at CanSecWest 2010.