PT-2006-7505 · Microsoft+2 · Windows Mobile+5

Published 2006-12-31 · Updated 2023-12-15 · CVE-2006-6908

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Widcomm Stack versions 3.x and earlier Widcomm BTStackServer versions 1.3.2.7 through 1.4.2.10 Widcomm Bluetooth Communication Software version 1.4.1.03 Bluetooth implementation on Windows Mobile or Windows CE on the HP IPAQ 2215 and 5450

Description: The issue is a buffer overflow in the Bluetooth Stack COM Server in the Widcomm Bluetooth stack. This allows remote attackers to cause a denial of service, resulting in a service crash, and possibly execute arbitrary code via unspecified vectors.

Recommendations: For Widcomm Stack versions 3.x and earlier, update to a version later than 3.x to resolve the issue. For Widcomm BTStackServer versions 1.3.2.7 through 1.4.2.10, update to a version later than 1.4.2.10 to resolve the issue. For Widcomm Bluetooth Communication Software version 1.4.1.03, update to a version later than 1.4.1.03 to resolve the issue. For the Bluetooth implementation on Windows Mobile or Windows CE on the HP IPAQ 2215 and 5450, consider disabling the Bluetooth functionality until a patch is available.

Fix

Related Identifiers

CVE-2006-6908

Affected Products

Hp Ipaq

Widcomm Btstackserver

Widcomm Bluetooth Communication

Widcomm Stack

Windows Ce

Windows Mobile

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2006-6908 · Security Note
• http://securityfocus.com/archive/1/455889/100/0/threaded · Note
• https://t.me/cvenotify/63794 · Telegram Post
• http://events.ccc.de/congress/2006-mediawiki//images/f/fb/23c3_Bluetooh_revisited.pdf · Note
• http://osvdb.org/37587 · Note