Windows messaging bug crashes mobile and desktop applications

Windows messaging bug crashes mobile and desktop applications.(IMG:J.Anderson)

Jordanian mobile researcher Khaled Salameh has discovered a bug in Windows Phone 7.5 capable of creating a Denial-of-Service scenario that crosses over to the desktop. The good news is, only Salameh, Tom Warren at WinRumors.com, and Microsoft know how to pull off any potential attack. Thus, there will be no application crashing pranks while everyone waits for an update to fix the issue.

WinRumors.com broke the story after Salameh gave them a tip on his research, which can also impact desktop applications. The bug itself works by sending a string of text to a Windows Phone, triggering a device reboot. After the reboot, the device’s messaging hub is rendered useless, even after countless restart attempts.

At this point, as Warren wrote, “there doesn’t appear to be a workaround to fix the messaging hub apart from hard resetting and wiping the device.”

“We have tested the attack on a range of Windows Phone devices, including HTC’s TITAN and Samsung’s Focus Flash. Some devices were running the 7740 version of Windows Phone 7.5, others were on Mango RTM build 7720. The attack is not device specific and appears to be an issue with the way the Windows Phone messaging hub handles messages,” the WinRumors.com story explained.

Initial reports called Salameh’s findings an SMS bug, but it’s actually a Windows Phone bug, as it can crash other applications. Moreover, desktop applications are vulnerable as well. In the WinRumor.com report, this was confirmed because the crash can be triggered via Facebook and Windows Live Messenger instant messages, in addition to SMS messages. The Facebook tie-in comes from a condition where a user has assigned a friend as a live tile on their device. Otherwise, the Facebook application itself isn't an issue.

When asked what else is impacted, Salameh told The Tech Herald that Visual Studio, Blend4, Windows Live Mail, Windows Live Messenger, all Silverlight Based applications, and all Windows Presentation Foundation (WPF) applications are vulnerable.

“However, attacks are only possible on Win Live Messenger, WinPhone7, and Win Live Mail Desktop App (by sending emails to victims),” he added via Twitter.

Speaking to the severity of the issue, Salameh commented that he felt triggering a crash on Windows 7 via Windows Live Messenger, “is as valuable as causing Windows Phone 7 messaging hub to crash.” 

Warren and Salameh are working with Microsoft to address the issue. In a statement, Microsoft’s Greg Sullivan said that they are aware of the bug, and engineers are investigating.

Jerry Bryant, group manager for response communications at Microsoft, added that the software firm is '...examining this issue closely to determine what actions need to be taken to help ensure customers are protected.'

The Tech Herald has asked for additional comments and information, and we’ll update as soon as we hear back from Redmond.

Update:

(13:15 EST) HTC 7 Pro with build 7004 is also vulnerable according to Salameh.

(13:40 EST) Updated to add more information about the Facebook application tie-in.

(13:40 EST) On a side note, those interested in learning the actual text string used to trigger the crashes seem to be attacking Salameh's Windows Live account.

'My windows live account is locked for the second time today! Whoever is trying to hack my email thinks the code is in the inbox, funny!'

(14:00 EST)

'I will continue testing, but it's obvious that the problem exists in the OS itself and is not (Device/Carrier) related...And since Mango also faces the issue, I doubt that any version in between won't be vulnerable,' commented Salameh.

Build 7392 on HTC 7 Pro crashes as well.
Samsung Focus (AT&T) running NoDo also crashes.

 

Like this article? Please share on Facebook and give The Tech Herald a Like too!

From our Other Sites

Aston Martin DBX Concept Pictures

Some pictures of the new concept from Aston Martin. The Aston Martin DBX Concept would feature in-board electric motors in each wheel and be bristling with high tech driver aids, details here.

Aston Martin DBX Concept Debuts

Aston Martin have been showing off their latest ideas for luxury GT travel at the Geneva Motor Show with the Aston Martin DBX Concept. The DBX Concept is all-wheel drive and has plenty of luggage space, with both a rear trunk and foreword load bay.The paint job features a custom Black Pearl Chromium finish. The […]

Porsche 911 GT3 RS Pictures

Some more pics of the new Porsche 911 GT3 RS. The car got its world premiere at the Geneva Motor Show, further details here.

New Porsche 911 GT3 RS World Premiere

The new Porsche 911 GT3 RS got its world premiere at the Geneva Motor Show. Porsche says the GT3 RS has the max amount of motorsport tech that they could get into a street legal 911 and still be driven as an every day car.Its 4.0 liter six cylinder engine puts out 500 horsepower and 338 […]

Nissan Sway Concept Pictures

Some cool pics of Nissan’s latest compact hatch idea the Nissan Sway Concept, revealed at the Geneva Show. You can read more about it here.

Nissan Sway Concept at Geneva

Nissan have unveiled their new compact hatchback concept car, the Nissan Sway at the Geneva Motor Show. The company say they are looking to shake up the segment with less conservative looks than its rivals.With a glass roof and and no B-pillar they say the small car feels much much larger than you would expect. […]

Aston Martin DBX Concept Wallpaper

Some cool Aston Martin DBX Concept wallpaper for your mobile device or desktop. This concept really is looking pretty far into the future and features electric motors in the wheels and a multitude of driver aids.Each picture goes to a page with multiple sizes of wallpaper so you can find the right one.

Lotus Evora 400 Debuts at Geneva

The new Lotus Evora 400 has been unveiled at the Geneva Motor Show. The company says the new Evora is faster and handles better than any of the previous Evora, giving a better drive and improved agility.The car has a mid-mounted 3.5 liter V6 which puts out 400 horsepower and 410 Nm of torque. That will […]

Nissan Sway Concept Wallpaper

Some cool Nissan Sway Concept wallpaper for your desktop or mobile device. The Sway is the latest small hatchback concept from the Japanese giant and is aimed at the European market.Each image links to a page with multiple wallpaper sizes for you to download.

Porsche 911 GT3 RS Wallpaper

Some cool Porsche 911 GT3 RS wallpaper for your desktop or mobile device. The new 911 GT3 RS for 2016 has a 4.0 liter engine and puts out 500 horsepower, will get you to 60 mph in about 3.1 seconds.Each image leads to a page with multiple wallpaper sizes so you can find the right one.