PT-2007-2128 · Microsoft · Windows Mobile

Publicado 2007-02-03 · Atualizado 2017-07-29 · CVE-2007-0674

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Windows Mobile versions 5.0, 2003, and 2003SE

Description The issue allows user-assisted remote attackers to cause a denial of service, resulting in a device hang, by exploiting a flaw in the handling of malformed JPEG files on affected Windows Mobile devices.

Recommendations For Windows Mobile version 5.0, avoid using the Pictures and Videos application to open JPEG files from untrusted sources until a fix is available. For Windows Mobile versions 2003 and 2003SE, refrain from opening JPEG files from unknown sources in the Pictures and Videos application to minimize the risk of device hang.

Correção

Identificadores relacionados

CVE-2007-0674

Produtos afetados

Windows Mobile

Referências · 6

• http://securityfocus.com/bid/22343 · Nota
• http://osvdb.org/36148 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2007-0674 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32002 · Nota
• http://vupen.com/english/advisories/2007/0434 · Nota
• http://blog.trendmicro.com/trend-micro-finds-more-windows-mobile-flaws · Nota