PT-2007-2128 · Microsoft · Windows Mobile

Published 2007-02-03 · Updated 2017-07-29 · CVE-2007-0674

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Windows Mobile versions 5.0, 2003, and 2003SE

Description The issue allows user-assisted remote attackers to cause a denial of service, resulting in a device hang, by exploiting a flaw in the handling of malformed JPEG files on affected Windows Mobile devices.

Recommendations For Windows Mobile version 5.0, avoid using the Pictures and Videos application to open JPEG files from untrusted sources until a fix is available. For Windows Mobile versions 2003 and 2003SE, refrain from opening JPEG files from unknown sources in the Pictures and Videos application to minimize the risk of device hang.

Fix

Related Identifiers

CVE-2007-0674

Affected Products

Windows Mobile

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2007-0674 · Security Note
• http://securityfocus.com/bid/22343 · Note
• http://osvdb.org/36148 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32002 · Note
• http://vupen.com/english/advisories/2007/0434 · Note
• http://blog.trendmicro.com/trend-micro-finds-more-windows-mobile-flaws · Note