Microsoft ActiveSync, the synchronization tool for Windows Mobile, can be used to attack your workstation according to WindowsForDevices.
The issue is based on the way how ActiveSync works: once a device is connected, it gets full TCP/IP access to the desktop PC. This connection then allows the Windows Mobile device to attack network services – if a vulnerable network service is running, root access can be achieved.
Luckily, the vulnerability requires your attacker to have physical access to your box – so locking your office door is a surefire way to remain safe…
Get the full scoop here:
http://www.windowsfordevices.com/news/NS4700052907.html?kc=rss
Related posts:
