Total MultiMedia Features - Sony Ericsson Phones Denial of Service (PoC)

EDB-ID:

11043

CVE:

N/A

Author:

Aodrulez

Type:

dos

Platform:

Hardware

Published:

2010-01-06

Total Multimedia Features DoS PoC for Sony Ericsson Phones.
(Should work on almost all of their Models)
By Aodrulez.

   In Sony Ericsson phones(tested on w800i,k750i,w810i),
if you simply rename a File with a ".sest" extension,
it achieves "System" File status.This file can't be deleted,
nor renamed or edited by any means By the Phone.The only way
to remove or rename those files is to connect the phone to 
your Personal Computer & then rename them.
	Folders such as Images Folder,Videos Folder etc,if
renamed in Foldername.sest format, then this folder attains
System Folder status, & no matter how many files are present
in it, they become totally invisible.When you try to open these
folders in the phone, it says "No Files in this folder" even when
in reality files are present in it.
	Using this Vulnerability, you can totally disable all the
Multimedia features of these phones.
	J2me applications are capable of causing this Filesystem DoS
effect.A PoC of this DoS Function, is the "VooDoo" function of my
J2me File protection application "The Messiah" that am attaching.

------------------------------------------------------------------
Greetz Fly out to:
1]LiquidWorm.
2]Amforked().
3]www.Orchidseven.com
4]www.isac.org.in
------------------------------------------------------------------
By:
	   Aodrulez,
   www.OrchidSeven.com,
   aodrulez.blogspot.com.
Email : f3arm3d3ar@gmail.com

===============
Download
===============
https://github.com/offensive-security/exploitdb-bin-sploits/raw/master/bin-sploits/11043.rar (Sony_Ericsson.rar)