Security hole found in Sony Ericsson phones

Posted by Michell | November 21st, 2007

It seems that two research scientists - Adrian Nowak and Karsten Sohr - at Bremen University in Germany has found a security hole in Sony Ericsson phones that can give applications read & write access to the system files, and in worst cases exploit this access. However this can also give users the ability to change or delete some of the “unwanted” system files such as protected ring tones, parts of operator branding and alike.

t650_java_permission_denied.jpg

The “affected” phones - so to speak - are phones sold between 2005 - 2007, which means that it’s everything from the good old K750 to newer phones such as T650 - maybe also the K850 and W910, but that’s not for sure. Only Java phones (those running OSE and not Symbian UIQ) has this “problem”.

Personally I don’t think it’s that much of a problem as the user must grant the application permission to access these files. So please do not worry about this - it’s still totally safe to use your phone and install applications. It just shows that the students at Bremen University should have better things to do than this ;-)

Filed under: A1 / A100, Application, Firmware, Java, Problems
1 Star2 Stars3 Stars4 Stars5 Stars (No Ratings Yet)
Loading ... Loading ...

One response to “Security hole found in Sony Ericsson phones”

Comments

  1. wiglet says:

    Genius =P

    12:52 am on 12/3/07

Leave a Reply