[HIB]Palm Pre flaw lets hackers bug calls

A specially-crafted vCard, or virtual business card, could be used to exploit the vulnerability in the Palm Pre's WebOS operating system as the handheld does not employ any security measures, Basingstoke-based WMR InfoSecurity said on Wednesday.The company discovered that a malicious vCard can be transferred to the phone using SMS, Bluetooth or via the web browser. Simply viewing the vCard is enough to fully compromise the business-focused handheld, which results in the intruder being able to remotely bug the device, it said.Once exposed, recordings can be fully controlled by the attacker. The phone can be forced to transmit and record audio and data at the hacker's will, either continuously or on-demand, according to Alex Fidgin, the director of MWR Security.

**Hidden Content: To see this hidden content your post count must be 1 or greater.**