PT-2009-4940 · Nokia · Nokia N95+2

Thierry Zoller · Published 2009-07-20 · Updated 2018-10-10 · CVE-2009-2538

Positive Technologies (AI Summary)

CVSS v2.0

7.1

High

Base vector

AV:N/AC:M/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Nokia N95 version 9.2 Nokia N82 (affected versions not specified) Nokia N810 Internet Tablet (affected versions not specified)

Description The issue allows remote attackers to cause a denial of service, specifically memory consumption, by utilizing a large integer value for the length property of a Select object.

Recommendations For Nokia N95 version 9.2: Avoid using large integer values for the length property of a Select object to prevent memory consumption. For Nokia N82: At the moment, there is no information about a newer version that contains a fix for this issue. For Nokia N810 Internet Tablet: At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Weakness Enumeration

CWE-399

Related Identifiers

CVE-2009-2538

Affected Products

Nokia N810 Internet Tablet

Nokia N82

Nokia N95

References · 8

• 🔥 http://exploit-db.com/exploits/9160 · Exploit
• 🔥 http://g-sec.lu/one-bug-to-rule-them-all.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2009-2538 · Security Note
• http://securityfocus.com/archive/1/504969/100/0/threaded · Note
• http://securityfocus.com/archive/1/505006/100/0/threaded · Note
• http://securityfocus.com/archive/1/504988/100/0/threaded · Note
• http://securityfocus.com/archive/1/504989/100/0/threaded · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/52872 · Note