Microsoft browser vulnerabilities and the police

admin
January 28, 2009


The Polish Police did an IT modernization project in 2008 for installing mobile terminals in police cars. The software in the mobile terminal uses Microsoft IE.

Since the mobile terminals use Microsoft IE – it should be possible to attack the mobile terminal using one of the known IE software vulnerabilities

You could attack one of these terminals, execute code, steal information, follow police cars around – and steal data – the opportunities are endless.  For example – this one enables remote code exection –  Vulnerability in Internet Explorer that  can allow remote code Execution.

From  a press release on Sygnity Poland Web site (the IT integrator that did the project)

At the beginning of the year 2008 yet another project implemented by the Sygnity Group for the Polish Police Headquarters in Warsaw was finalised. According to the agreement, the police officers were equipped with the new mobile terminals. The implementation of the project is part of a process the aim of which is a general modernisation of the police.

A mobile terminal is a computer equipped with a web browser, using the GPRS/EDGE technology for data transfer. The software of the device meets the Microsoft Windows standards.

An undeniable advantage of mobile terminals is that they enable the officers a direct access to the National Police Information System (NPIS), which in practice means a fast verification of personal details of the detainees or their vehicles.  The use of mobile terminals leads therefore to the increase of the officers’ prestige, and ensures a higher standard and quality of their actions.

This is an opportunity for hackers – if you exploit the browser in the mobile terminal you can gain access to the National Police Information System (NPIS), which in practice means a fast way to steal personal details of the detainees and their vehicles.

More Articles