“Researchers have managed to crack Palm’s webOS with a simple text message. The team at Intrepidus Group worked on a Palm Pre running the 1.3.5. version of the webOS operating system, and found it open to many common vulnerabilities due to its inherent design…

…The team said that the SMS system did not perform input/output validation. This allows an HTML injection attack by inserting an iFrame into the message, which is automatically activated. The team then demonstrated this in a video.”

(Courtesy of v3.co.uk)