Nokia Java flaw may affect millions

A flaw in a way the Nokia S40 handles Javascript could allow a hacker to execute arbitrary code on the handset.

Security firm F-Secure said that the vulnerability could affect "more than 100 million phones" worldwide, as it wasn't necessarily limited to the S40.

The flaw was reported by Adam Gowdiak, though he provided very few details of the hack on the Security Explorations website and is asking for €20,000 for access to his research.

"The S40 platform has never been targeted by a mobile phone virus or other malware. We're not expecting to see real-world attacks using this vulnerability in the near future either," said Jarno Niemela of F-Secure.

F-Secure said it was continuing to monitor developments.

www.security-explorations.com
www.f-secure.co.uk