[bydandie]

Is it just me, or what was the point of having the update facility in WM? The patch has to be built into the base build, so HTC would have to package it into their ROM builds AFAIK.

It also requires user input as below

"Access Vector: Network exploitable , Victim must voluntarily interact with attack mechanism"

So in terms of bang for buck it really isn't the type of thing that would be attractive to cybercrime when there are far better vulnerable systems with a guaranteed fast internet connection.