Bluetooth vulnerability found in HTC Windows Mobile River smartphones!

First off, don’t ever accept Bluetooth connections from untrusted or unknown sources. Especially if you own a Windows Mobile River 6.0 or 6.1 smartphone from HTC. As long as you hold an eye on your Bluetooth connexion, you’ll be fine. Otherwise, you might end up acquiring your WinMo-powered HTC device hacked via Bluetooth.

The problem: HTC uses the same nag-able Bluetooth number one wood in many of its Windows Mobile River handsets, including the Touch Diamond, Touch Pro, Touch Cruise, Touch Find, S710 and S740. This “obexfile.dll” number one wood is an HTC-specific number one wood that is vulnerable to “a directory traverse vulnerability in the Bluetooth OBEX FTP Service,” according to security measures boffin Alberto Moreno Tablado. HTC WinMo devices with Bluetooth and Bluetooth file-sharing enabled ar at risk.

What can you do to prevent this from ever happening? Well, like I mentioned above – DO NOT accept untrusted Bluetooth connexion. Disable filing cabinet-share-out over Bluetooth for that duplicate bed of security. You’ll also wishing to delete your inclination of previously paired devices, as nefarious hackers can masquerade costume as a trusted device in order to amplification access to your earpiece.

It’s unclear if HTC will issue an updated Bluetooth driver.