Description
The SMS handler for Windows Mobile 2005 Pocket PC Phone edition allows attackers to hide the sender field of an SMS message via a malformed WAP PUSH message that causes the PDU to be incorrectly decoded.
References
- win-mobile-sms-obfuscation(37249) vdb-entry
- 45517 vdb-entry
- 26091 vdb-entry
- http://www.symantec.com/content/en/us/enterprise/research/SYMSA-2007-011.txt
- 1018832 vdb-entry
- 20071017 SYMSA-2007-011: Microsoft WM5 PocketPC Phone Ed SMS Handler Issue mailing-list