PT-2007-5408 · Palm · Palm Os

Published 2007-08-21 · Updated 2018-10-15 · CVE-2007-4213

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Palm OS on Treo versions 650, 680, 700p, and 755p

Description The issue allows remote attackers to cause a denial of service, resulting in a device reset or hang, by sending a flood of large ICMP echo requests.

Recommendations For Treo 650, 680, 700p, and 755p, consider restricting access to the network to minimize the risk of exploitation. As a temporary workaround, consider implementing rate limiting for ICMP echo requests until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

CVE-2007-4213

Affected Products

Palm Os

References · 11

• https://nvd.nist.gov/vuln/detail/CVE-2007-4213 · Security Note
• http://securityfocus.com/archive/1/477231/100/0/threaded · Note
• http://securityfocus.com/archive/1/477235/100/0/threaded · Note
• http://securityfocus.com/bid/25074 · Note
• http://securityfocus.com/archive/1/477346/100/0/threaded · Note
• http://securityfocus.com/archive/1/477169/100/0/threaded · Note
• http://symantec.com/content/en/us/enterprise/research/SYMSA-2007-007.txt · Note
• http://securityfocus.com/archive/1/477350/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/36124 · Note
• http://securityreason.com/securityalert/3034 · Note
• http://securityfocus.com/archive/1/477128/100/0/threaded · Note