Total Multimedia Features DoS PoC for Sony Ericsson Phones

vendor:

Sony Ericsson Phones

by:

Aodrulez

7,8

CVSS

HIGH

DoS

N/A

CWE

Product Name: Sony Ericsson Phones

Affected Version From: N/A

Affected Version To: N/A

Patch Exists: NO

Related CWE: N/A

CPE: N/A

Metasploit: N/A

Other Scripts: N/A

Tags: N/A

CVSS Metrics: N/A

Nuclei References: N/A

Nuclei Metadata: N/A

Platforms Tested: J2ME

2006

Total Multimedia Features DoS PoC for Sony Ericsson Phones

In Sony Ericsson phones (tested on w800i, k750i, w810i), if you simply rename a File with a '.sest' extension, it achieves 'System' File status. This file can't be deleted, nor renamed or edited by any means By the Phone. The only way to remove or rename those files is to connect the phone to your Personal Computer & then rename them. Folders such as Images Folder, Videos Folder etc, if renamed in Foldername.sest format, then this folder attains System Folder status, & no matter how many files are present in it, they become totally invisible. When you try to open these folders in the phone, it says 'No Files in this folder' even when in reality files are present in it. Using this Vulnerability, you can totally disable all the Multimedia features of these phones. J2me applications are capable of causing this Filesystem DoS effect. A PoC of this DoS Function, is the 'VooDoo' function of the J2me File protection application 'The Messiah'.

Mitigation:

N/A

Source

Exploit-DB raw data:

Total Multimedia Features DoS PoC for Sony Ericsson Phones.
(Should work on almost all of their Models)
By Aodrulez.

   In Sony Ericsson phones(tested on w800i,k750i,w810i),
if you simply rename a File with a ".sest" extension,
it achieves "System" File status.This file can't be deleted,
nor renamed or edited by any means By the Phone.The only way
to remove or rename those files is to connect the phone to 
your Personal Computer & then rename them.
	Folders such as Images Folder,Videos Folder etc,if
renamed in Foldername.sest format, then this folder attains
System Folder status, & no matter how many files are present
in it, they become totally invisible.When you try to open these
folders in the phone, it says "No Files in this folder" even when
in reality files are present in it.
	Using this Vulnerability, you can totally disable all the
Multimedia features of these phones.
	J2me applications are capable of causing this Filesystem DoS
effect.A PoC of this DoS Function, is the "VooDoo" function of my
J2me File protection application "The Messiah" that am attaching.

------------------------------------------------------------------
Greetz Fly out to:
1]LiquidWorm.
2]Amforked().
3]www.Orchidseven.com
4]www.isac.org.in
------------------------------------------------------------------
By:
	   Aodrulez,
   www.OrchidSeven.com,
   aodrulez.blogspot.com.
Email : f3arm3d3ar@gmail.com

===============
Download
===============
https://gitlab.com/exploit-database/exploitdb-bin-sploits/-/raw/main/bin-sploits/11043.rar (Sony_Ericsson.rar)