Lucene search

[email protected]CVE-2006-6908

HistoryJan 08, 2007 - 8:00 p.m.

CVE-2006-6908

2007-01-0820:00:00

[email protected]

web.nvd.nist.gov

widcomm

bluetooth stack

buffer overflow

cve-2006-6908

windows

windows mobile

windows ce

hp ipaq 2215

hp ipaq 5450

denial of service

code execution

8.5 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.047 Low

EPSS

Percentile

92.7%

JSON

Buffer overflow in the Bluetooth Stack COM Server in the Widcomm Bluetooth stack, as packaged as Widcomm Stack 3.x and earlier on Windows, Widcomm BTStackServer 1.4.2.10 and 1.3.2.7 on Windows, Widcomm Bluetooth Communication Software 1.4.1.03 on Windows, and the Bluetooth implementation in Windows Mobile or Windows CE on the HP IPAQ 2215 and 5450, allows remote attackers to cause a denial of service (service crash) and possibly execute arbitrary code via unspecified vectors.

Affected configurations

NVD

Node

broadcomwidcomm_bluetoothMatch1.4.1.03windows

Node

broadcomwidcomm_bluetoothRange≤3windows

broadcomwidcomm_bluetoothMatch1.3.2.7windows

broadcomwidcomm_bluetoothMatch1.4.2.10windows

microsoftwindows_embedded_compact

microsoftwindows_mobile

CPENameOperatorVersion
broadcom:widcomm_bluetoothbroadcom widcomm bluetootheq1.4.1.03

CPE	Name	Operator	Version
broadcom:widcomm_bluetooth	broadcom widcomm bluetooth	eq	1.4.1.03

References

events.ccc.de/congress/2006-mediawiki//images/f/fb/23c3_Bluetooh_revisited.pdf

osvdb.org/37587

www.securityfocus.com/archive/1/455889/100/0/threaded

8.5 High

AI Score

Confidence

High

10 High

CVSS2

Access Vector

Access Complexity

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

0.047 Low

EPSS

Percentile

92.7%

JSON

Related for CVE-2006-6908

nvd1 cvelist1