PT-2009-4940 · Nokia · Nokia N95+2

Thierry Zoller · Publicado 2009-07-20 · Atualizado 2018-10-10 · CVE-2009-2538

Positive Technologies (AI Summary)

CVSS v2.0

7.1

Alta

Vetor base

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Nokia N95 version 9.2 Nokia N82 (affected versions not specified) Nokia N810 Internet Tablet (affected versions not specified)

Description The issue allows remote attackers to cause a denial of service, specifically memory consumption, by utilizing a large integer value for the length property of a Select object.

Recommendations For Nokia N95 version 9.2: Avoid using large integer values for the length property of a Select object to prevent memory consumption. For Nokia N82: At the moment, there is no information about a newer version that contains a fix for this issue. For Nokia N810 Internet Tablet: At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Correção

Enumeração de Fraquezas

CWE-399

Identificadores relacionados

CVE-2009-2538

Produtos afetados

Nokia N810 Internet Tablet

Nokia N82

Nokia N95

Referências · 8

• 🔥 http://exploit-db.com/exploits/9160 · Exploit
• 🔥 http://g-sec.lu/one-bug-to-rule-them-all.html · Exploit
• http://securityfocus.com/archive/1/504969/100/0/threaded · Nota
• http://securityfocus.com/archive/1/505006/100/0/threaded · Nota
• http://securityfocus.com/archive/1/504988/100/0/threaded · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-2538 · Nota de Segurança
• http://securityfocus.com/archive/1/504989/100/0/threaded · Nota
• https://exchange.xforce.ibmcloud.com/vulnerabilities/52872 · Nota