EnterpriseMobileToday PDAStreet

Home | News | Reviews | Features | Tips | Mobile Product Watch | Forums



Internet.com's premiere site for mobile managers and IT professionals is where wireless meets business. Our expert analysis and tips will guide you in buying, deploying, securing and managing mobile technology in the enterprise. You'll find strategic analysis, best practices, news, buyer.s guides and practical advice on how to evaluate and support a wide range of devices in the workforce.


PDAStreet.com > News > Android 'Cupcake' Vulnerabilities Get Patched

Android 'Cupcake' Vulnerabilities Get Patched

By Michelle Megna
October 13, 2009

Microsoft and T-Mobile aren't the only mobile vendors moving to cope with some unexpected headaches: Google has patched two bugs in version 1.5 of its mobile open source platform, Android.

The software version, codenamed Cupcake, faced two vulnerabilities that could have led to denial-of-service (DoS) attacks, according to researchers at the Open Source Computer Emergency Response Team (oCERT).

One of the vulnerabilities involved Android's SMS management, according to an advisory released by oCERT earlier this week. The flaw allows an attacker to use WAP (Wireless Application Protocol) push messages to disconnect a mobile phone from a cellular network. WAP push messages are typically used to send ringtones, wallpaper and other content to mobile users.

A maliciously coded WAP message can cause the smartphone to reboot without the user's knowledge, which can lead to a temporary loss of connectivity and dropped calls, according to oCERT.

Get the full story here at InternetNews.com.

 
 Printable Version
 Email this Story to a Friend