PT-2007-2301 · Palm · Palm Os

J.R. Wikes + 2 · Published 2007-02-16 · Updated 2018-10-16 · CVE-2007-0859

Positive Technologies (AI Summary)

CVSS v2.0

2.1

Low

Base vector

AV:L/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Palm OS Treo smart phones (affected versions not specified)

Description: The issue allows attackers with physical access to obtain sensitive information from the device's memory by utilizing the Find feature, which remains operational even when the system is locked with a password. This can be achieved through text searches or paste operations after pressing specific keyboard shortcut keys.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Related Identifiers

CVE-2007-0859

Affected Products

Palm Os

References · 13

• 🔥 http://symantec.com/enterprise/research/SYMSA-2007-002.txt · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2007-0859 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/32502 · Note
• http://securityfocus.com/archive/1/460059/100/0/threaded · Note
• http://securityfocus.com/archive/1/460908/100/0/threaded · Note
• http://securityfocus.com/archive/1/460911/100/0/threaded · Note
• http://securityfocus.com/archive/1/460328/100/0/threaded · Note
• http://securityreason.com/securityalert/2260 · Note
• http://discussion.treocentral.com/showthread.php?p=1199445&posted=1#post1199445 · Note
• http://osvdb.org/33724 · Note
• http://securityfocus.com/bid/22468 · Note
• http://securityfocus.com/archive/1/460901/100/0/threaded · Note
• http://securityfocus.com/archive/1/460954/100/0/threaded · Note