Re: 2 vulnerabilities combine to auto execute received files in Nokia series 60 OS

[dk <dk () pwarchitects com>]

Paul Kurczaba wrote:
> Wouldn't the phone try to open the jpg file as a picture, and not execute
> it. Just like on desktop PCs: if you rename a .exe (application/program) to
> a jpg (picture file), and try to open the file, your image program will open
> the file, thinking it is a image file. The application code will not be
> executed.

Just because one peculiar desktop OS for PC's (MS' variety) chooses this 
action does not indicate that others do; especially where embedded 
systems are concerned.
There are many ways it can be done.

--
dk


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html