PT-2007-1981 · Sony Ericsson · Sony Ericsson K810I+1

Publicado 2007-01-26 · Atualizado 2018-10-16 · CVE-2007-0521

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Baixa

Vetor base

AV:A/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Sony Ericsson K700i and W810i phones (affected versions not specified)

Description The issue allows remote attackers to cause a denial of service, resulting in continual modal dialogs and UI unavailability. This can be achieved by repeatedly trying to OBEX push a file over Bluetooth.

Recommendations For Sony Ericsson K700i and W810i phones, as a temporary workaround, consider disabling Bluetooth file transfer functionality until a patch is available. Restrict access to the OBEX push feature to minimize the risk of exploitation.

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2007-0521

Produtos afetados

Sony Ericsson K700I

Sony Ericsson K810I

Referências · 4

• http://securityfocus.com/archive/1/457797/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-0521 · Nota de Segurança
• http://securityfocus.com/archive/1/457768/100/0/threaded · Nota
• http://securityreason.com/securityalert/2180 · Nota