Collin Mulliner

Name of the Vulnerable Software and Affected Versions: Android version 1.5 CRBxx Description: The issue allows remote attackers to cause a denial of service, resulting in application restart and network disconnection, via an SMS message containing a malformed WAP Push message. This message triggers an ArrayIndexOutOfBoundsException exception. Recommendations: For Android version 1.5 CRBxx, at the moment, there is no information about a newer version that contains a fix for this issue.

**Name of the Vulnerable Software and Affected Versions** Apple iPhone OS versions prior to 3.1 **Description** The issue is related to the Telephony component, which does not properly handle SMS arrival notifications. This allows remote attackers to cause a denial of service, resulting in a NULL pointer dereference and service interruption, via a crafted SMS message. **Recommendations** For versions prior to 3.1, update to version 3.1 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Apple iPhone OS versions prior to 3.0.1 **Description** The issue allows remote attackers to execute arbitrary code, obtain GPS coordinates, or enable the microphone via an SMS message that triggers memory corruption. **Recommendations** For versions prior to 3.0.1, update to version 3.0.1 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Apple iPhone OS versions 1.0 through 2.2.1 Apple iPhone OS for iPod touch versions 1.1 through 2.2.1 **Description** The issue allows remote attackers to potentially force the iPhone to place a call without user approval. This occurs when the Mail component dismisses the call approval dialog upon the appearance of another alert, possibly triggered by an application. **Recommendations** For Apple iPhone OS versions 1.0 through 2.2.1, update to a version outside of this range to resolve the issue. For Apple iPhone OS for iPod touch versions 1.1 through 2.2.1, update to a version outside of this range to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Apple iPhone OS versions 1.0 through 2.2.1 Apple iPhone OS for iPod touch versions 1.1 through 2.2.1 **Description** The issue concerns the Mail component, which does not offer an option to disable remote image loading in HTML emails. This allows remote attackers to determine the device's address and when an email is read by sending an HTML email that contains an image URL. **Recommendations** For Apple iPhone OS versions 1.0 through 2.2.1, consider disabling HTML email rendering until a fix is available. For Apple iPhone OS for iPod touch versions 1.1 through 2.2.1, consider disabling HTML email rendering until a fix is available.

**Name of the Vulnerable Software and Affected Versions** Nokia 6131 Near Field Communication (NFC) phone with firmware version 05.12 **Description** The issue concerns the SmartPoster implementation, which does not properly display the URI record when the Title record contains a specific combination of space, CR (aka r), and . (dot) characters. This allows remote attackers to trick a user into loading an arbitrary URI via a crafted NDEF tag. Examples of exploitation include loading an http: URI for a malicious web site, a tel: URI for a premium-rate telephone number, and an sms: URI that triggers the purchase of a ringtone. **Recommendations** For Nokia 6131 Near Field Communication (NFC) phone with firmware version 05.12, consider disabling the SmartPoster feature until a patch is available to prevent exploitation. Restrict access to crafted NDEF tags to minimize the risk of loading arbitrary URIs. Avoid using the phone's NFC functionality with untrusted sources until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Nokia 6131 version 05.12 **Description** The issue allows remote attackers to execute arbitrary code via a crafted URI record in an NDEF tag. This is made possible because the phone automatically installs software upon completing the download of a JAR file. **Recommendations** For Nokia 6131 version 05.12, consider disabling the automatic installation of software from JAR files as a temporary workaround until a patch is available. Restrict access to NFC functionality to minimize the risk of exploitation.