Symbian S60 Multiple Memory Corruption Vulnerabilities
BID:35590
Info
Symbian S60 Multiple Memory Corruption Vulnerabilities
| Bugtraq ID: | 35590 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 07 2009 12:00AM |
| Updated: | Jul 09 2009 08:16PM |
| Credit: | Bernhard Mueller |
| Vulnerable: |
Symbian S60 0 Nokia N96 0 Nokia E71 0 Nokia E61i 0 |
| Not Vulnerable: | |
Discussion
Symbian S60 Multiple Memory Corruption Vulnerabilities
Symbian S60 is prone to multiple memory-corruption vulnerabilities when handling specially crafted MP4, MP2, h.263, and h.264 files.
An attacker can exploit these issues to execute arbitrary code on the affected device and to compromise the device. Failed exploit attempts will result in a denial-of-service condition.
The following devices are affected:
Nokia N96
Nokia E61i
Nokia E71
Other devices may also be affected.
Symbian S60 is prone to multiple memory-corruption vulnerabilities when handling specially crafted MP4, MP2, h.263, and h.264 files.
An attacker can exploit these issues to execute arbitrary code on the affected device and to compromise the device. Failed exploit attempts will result in a denial-of-service condition.
The following devices are affected:
Nokia N96
Nokia E61i
Nokia E71
Other devices may also be affected.
Exploit / POC
Symbian S60 Multiple Memory Corruption Vulnerabilities
An attacker can exploit this issue by enticing an unsuspecting victim to open a malicious file.
An attacker can exploit this issue by enticing an unsuspecting victim to open a malicious file.
Solution / Fix
Symbian S60 Multiple Memory Corruption Vulnerabilities
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Symbian S60 Multiple Memory Corruption Vulnerabilities
References:
References:
- Symbian Homepage (Symbian)
- SEC Consult SA-20090707-0 :: Symbian S60 / Nokia firmware media (Bernhard Mueller