----------------------------------------------------------------------

Did you know that a change in our assessment rating, exploit code
availability, or if an updated patch is released by the vendor, is
not part of this mailing-list?

Click here to learn more:
http://secunia.com/advisories/business_solutions/

----------------------------------------------------------------------

TITLE:
Sony Ericsson Phones WAP Push Denial of Service Vulnerability

SECUNIA ADVISORY ID:
SA33616

VERIFY ADVISORY:
http://secunia.com/advisories/33616/

CRITICAL:
Moderately critical

IMPACT:
DoS

WHERE:
>From remote

OPERATING SYSTEM:
Sony Ericsson W910i
http://secunia.com/advisories/product/21255/
Sony Ericsson W660i
http://secunia.com/advisories/product/21257/
Sony Ericsson K618i
http://secunia.com/advisories/product/21258/
Sony Ericsson K610i
http://secunia.com/advisories/product/21259/
Sony Ericsson Z610i
http://secunia.com/advisories/product/21261/
Sony Ericsson K810i
http://secunia.com/advisories/product/21262/
Sony Ericsson K660i
http://secunia.com/advisories/product/21263/
Sony Ericsson W880i
http://secunia.com/advisories/product/21264/
Sony Ericsson K530i
http://secunia.com/advisories/product/21265/

DESCRIPTION:
A vulnerability has been reported in various Sony Ericsson phones,
which can be exploited by malicious people to cause a DoS (Denial of
Service).

The vulnerability is caused due to an error in the processing of WAP
Push packets, which can be exploited to reboot or crash an affected
device e.g. via a specially crafted SMS or a specially crafted UDP
packet to port 2948.

The vulnerability is reported in the following products:
W910i
W660i
K618i
K610i
Z610i
K810i
K660i
W880i
K530i

SOLUTION:
No valid solution is currently available.

PROVIDED AND/OR DISCOVERED BY:
Mobile Security Lab

ORIGINAL ADVISORY:
http://www.mseclab.com/index.php?page_id=123
http://www.mseclab.com/?p=128

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/advisories/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/advisories/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------