PT-2004-1850 · Microsoft+1 · Windows 98+4

Published 2004-09-14 · Updated 2018-10-19 · CVE-2004-0775

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions WIDCOMM Bluetooth Connectivity Software versions 1.3.2.7 through 1.4.2.10 BTStackServer versions 1.3.2.7 through 1.4.2.10 Windows XP (affected versions not specified) Windows 98 (affected versions not specified) HP IPAQ 5450 running WinCE 3.0

Description The issue allows remote attackers to execute arbitrary code via certain service requests. This is due to a buffer overflow in the WIDCOMM Bluetooth Connectivity Software.

Recommendations For WIDCOMM Bluetooth Connectivity Software versions 1.3.2.7 through 1.4.2.10, update to a version that contains a fix for this issue. For BTStackServer versions 1.3.2.7 through 1.4.2.10, update to a version that contains a fix for this issue. For Windows XP, apply the recommended patch or update from the vendor. For Windows 98, apply the recommended patch or update from the vendor. For HP IPAQ 5450 running WinCE 3.0, contact the vendor for a fix or update.

Fix

Related Identifiers

CVE-2004-0775

Affected Products

Btstackserver

Widcomm Bluetooth Connectivity

Wince

Windows 98

Windows Xp

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2004-0775 · Security Note
• http://pentest.co.uk/documents/ptl-2004-03.html · Vendor Advisory
• http://internetnews.com/security/article.php/3394181 · Note
• http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0029.html · Note
• http://marc.info/?l=bugtraq&m=109223783402624&w=2 · Note
• http://securityfocus.com/archive/1/418633/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16953 · Note