Nokia Series 60 Embedded OS Automatic File Execution Vulnerability

Bugtraq ID:	12340
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Jan 24 2005 12:00AM
Updated:	Jan 24 2005 12:00AM
Credit:	Discovery of this vulnerability is credited to Rohit Dube.
Vulnerable:	Nokia Series 60
Not Vulnerable:

Nokia Series 60 Embedded OS Automatic File Execution Vulnerability

A vulnerability is reported to affect the Series 60 OS on Nokia devices. It is reported that executable files that have a modified file extension will execute immediately when downloaded. The vendor reports that the user is prompted if the downloaded file is a 'sis' package, but it is not known whether other file types execute automatically and without a prompt.

This BID will be updated, as further information in regards to this vulnerability is made available.

Nokia Series 60 Embedded OS Automatic File Execution Vulnerability

No exploit is required.

Nokia Series 60 Embedded OS Automatic File Execution Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Nokia Series 60 Embedded OS Automatic File Execution Vulnerability

References:

• Nokia Series 60 Developer Platform (Nokia)