PT-2007-1981 · Sony Ericsson · Sony Ericsson K810I+1

Published 2007-01-26 · Updated 2018-10-16 · CVE-2007-0521

Positive Technologies (AI Summary)

CVSS v2.0

3.3

Low

Base vector

AV:A/AC:L/Au:N/C:N/I:N/A:P

Name of the Vulnerable Software and Affected Versions Sony Ericsson K700i and W810i phones (affected versions not specified)

Description The issue allows remote attackers to cause a denial of service, resulting in continual modal dialogs and UI unavailability. This can be achieved by repeatedly trying to OBEX push a file over Bluetooth.

Recommendations For Sony Ericsson K700i and W810i phones, as a temporary workaround, consider disabling Bluetooth file transfer functionality until a patch is available. Restrict access to the OBEX push feature to minimize the risk of exploitation.

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2007-0521

Affected Products

Sony Ericsson K700I

Sony Ericsson K810I

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2007-0521 · Security Note
• http://securityfocus.com/archive/1/457797/100/0/threaded · Note
• http://securityfocus.com/archive/1/457768/100/0/threaded · Note
• http://securityreason.com/securityalert/2180 · Note