The Register® — Biting the hand that feeds IT

Feeds

JPG hole cuts RAZR open

Motorola handset vulnerable

Cloud storage: Lower cost and increase uptime

A bug in Motorola's RAZR firmware could allow a malformed JPG file sent over MMS to overflow the stack, theoretically making it able to execute arbitrary code.

The exploit is hypothetical, and would be very hard to abuse, but it's still a serious enough prospect for Motorola to issue a fixed firmware download – even if it's taken them the best part of a year to do so.

The problem is in the EXIF parser, which extracts additional data from a JPG file when it's received. Exchangable Image File Format is a set of tags that can be embedded in image files, such as the location where the image was taken or the camera used to take it.

The problem was reported to the TippingPoint Zero Day Initiative back in October last year, and they informed Motorola at the time but kept the details to themselves until a fix was available. ®

SaaS data loss: The problem you didn’t know you had

Latest Comments

the woes of the v3

i too got the v3 due to its looks, but it was a useless phone! Massive lag when typing, crashes, battery unusable after only a year, only enough space for one mp3 or VERY short video clip. Rubbish phone.

0
0

Shoddy service for American victims^H^H^H^H^H^H^Hcustomers

@John Navas: I'm not at all surprised that the "Number One Provider" doesn't support a fix. Dealing with sub-Third World service is one very large reason I'm glad I don't live in the States anymore. (Sub-Third World politics is another, related issue, but we won't go there now) :-P

Paris because she's more competent at what she does than the megacorps are at what they say they do...

0
0

No update for AT&T Wireless, largest carrier in the USA

While there is an update for USA T-Mobile, there's no update for AT&T Wireless (Cingular), the largest carrier in the USA, a huge disservice to these users. Both Motorola and AT&T should be ashamed.

0
0

More from The Register

1,000 O2 staff chose redundancy over Capita
Betrayal, or just decent terms?
 breaking news
Pttow! Ofcom kicks hams out of MoD bands
Geet off my land, you, you ... 'secondary user'
 breaking news
Now you can use your phone instead of your wallet at the ATM, too
Blimey, these little paper towels out of the vending machine are really expensive
 breaking news
UK.gov's £530m bumpkin broadband rollout: 'Train crash waiting to happen'
Whitehall whispers of damning watchdog report next month
 breaking news
Microsoft Office 365 on iPhone NOW: No, we're not making this up
Word, Excel, Powerpoint for your pocket-stroker
 breaking news
MySpace zaps millions of teens' tearful rants, causes wave of angst
'Your crappy redesign SUCKS, I wanna read my blogs' screech users
EU signs off on eCall emergency-phone-in-every-car plan
GPS and a mobe in every car - do you suppose the NSA would fancy that?
 breaking news
 breaking news
SEXY models clash at big bash over catty tweets: Yup, it's HTC v Samsung
Tech titan twits taunt: Doncha wish your mobe was hot like me?