Few days ago we have covered that Khaled Salameh discovered a serious vulnerability on Windows phone 7.5 "Mango". He reported this vulnerability to WinRumors & Microsft.
Now Microsoft has found the root cause behind the SMS vulnerability in its Windows Phone operating system. Although it’s good that Microsoft has found a fix for the bug in Windows Phone devices, the exploit may also affect its other applications. So far it’s known to work not only through SMS messages but also through Facebook chat or Windows Live Messenger. The malicious code could be used to crash Windows Live Messenger in a way that would prevent all your contacts from signing in.
Microsoft is still investigating its other products that may be affected, including its desktop applications. Salameh revealed that the following applications are vulnerable to the SMS attack string: Windows Live Messenger, Windows Live Mail, Silverlight-based apps, Visual Studio 2010, Expressions Blend, and Windows Presentation Foundation-based apps.
Update: Microsoft's Greg Sullivan, senior product manager of Windows Phone, has confirmed that the company is working with device partners to issue a fix, but refused to reveal any timings for its release. "We are working on an update to address the issue and will work with our partners to coordinate its release," said Sullivan in a statement issued to us on Thursday.
LINK TO OUR HOME PAGE :


Categories:
Microsoft
,
security-news
,
vulnerablity