Geekzone reported today that the
Symantec Security Response Weblog has posted a note warning that an exploit is in the wild that uses the multimedia messaging service (MMS) as a vector. MMS are similar to the SMS but carry multimedia information such as text, sound, pictures and short videos. The warning is a follow up on a previously disclosed vulnerability found by researcher Collin Mulliner, who gave an updated version of his presentation titled "Advanced Attacks Against PocketPC Phones".
In summary:- There has been a publicly disclosed vulnerability for over six months now
- There is no patch for this vulnerability
- There is an exploit now out there
- There is no easy way to patch the vulnerable devices due to the lack of auto updates (try explaining what a firmware update is to your parents)
View Original News Post