Java bug information for Nokia phones available but for € 20,000

Filed in archive Security on August 15, 2008

Photo courtesy of iStockphoto, Heidi Kristensen

I am still not sure how much of this is true. A self proclaimed security expert and hacker from Poland by the name of Adam Gowdiak states that he has come across vulnerability in the mobile Java technology implemented in Nokia S40 and if this is a fact then millions of such handsets out in the market are under security threat. Due to this vulnerability hackers could bypass security restrictions and install malicious applications on a phone of the person.

As per his claim nearly 140 Nokia phone models could be affected by the bug and if we consider the number of handsets in the market then the figure could be anywhere around 1.5 billion handsets. The information has not been made public and you will only be able to access the complete report if you are willing to shell out € 20,000. The reason he is not willing to fork out information for free is that he has spent months in research and wants to raise money to setup his own company.

In the research report you will get complete information regarding how you can hack into Nokia S 40 phones and target functions such as audio and video recording, phone information, SIM card access and phone book access.

Though Sun did not comment on the vulnerability notice sent by Adam Gowdiak but Nokia stated that it had received the notice. Gowdiak may be rebuked for his decision to ask money for the infomration but I believe that rather than begging in front of others for money for his startup he wants to pump in his own hard earned money to make his dreams take shape and probably he is correct to some extent.