PT-2010-5241 · Hewlett Packard · Hp Palm Webos

Chris Clark · Published 2010-10-28 · Updated 2010-11-11 · CVE-2010-4025

Positive Technologies (AI Summary)

CVSS v2.0

9.3

High

Base vector

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions HP Palm webOS version 1.4.1

Description The issue allows remote attackers to execute arbitrary code via a crafted document. This can be demonstrated by a Word document.

Recommendations For HP Palm webOS version 1.4.1, consider avoiding the use of the Doc Viewer until a fix is available. As a temporary workaround, restrict the opening of crafted documents to minimize the risk of exploitation.

Fix

Related Identifiers

CVE-2010-4025

Affected Products

Hp Palm Webos

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2010-4025 · Security Note
• http://marc.info/?l=bugtraq&m=128821239031677&w=2 · Vendor Advisory
• http://secunia.com/advisories/42023 · Note
• http://securitytracker.com/id?1024656 · Note