October 25, 2004

Vulnerability hits Java for cell phones

A Polish researcher has found two vulnerabilities in the cell phone version of Sun Microsystems' Java software that under unusual circumstances could let a malicious program read private information or render a phone unusable. [via Asia C/net.]

"Before the vulnerabilities could be exploited, a phone user would have to download and run a malicious Java program, called a midlet, Adam Gowdiak, a 29-year-old security researcher said in an e-mail interview. He's not aware of a way to automate an attack."