Lucene search

K
cveMitreCVE-2007-0859
HistoryFeb 16, 2007 - 12:28 a.m.

CVE-2007-0859

2007-02-1600:28:00
mitre
web.nvd.nist.gov
26
palm os
treo
smart phones
find feature
vulnerability
security
information disclosure
cve-2007-0859

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

AI Score

5.9

Confidence

Low

EPSS

0.001

Percentile

50.9%

The Find feature in Palm OS Treo smart phones operates despite the system password lock, which allows attackers with physical access to obtain sensitive information (memory contents) by doing (1) text searches or (2) paste operations after pressing certain keyboard shortcut keys.

Affected configurations

Nvd
Node
palmtreoMatch650
OR
palmtreoMatch680
OR
palmtreoMatch700p
VendorProductVersionCPE
palmtreo650cpe:2.3:h:palm:treo:650:*:*:*:*:*:*:*
palmtreo680cpe:2.3:h:palm:treo:680:*:*:*:*:*:*:*
palmtreo700pcpe:2.3:h:palm:treo:700p:*:*:*:*:*:*:*

CVSS2

2.1

Attack Vector

LOCAL

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

NONE

Availability Impact

NONE

AV:L/AC:L/Au:N/C:P/I:N/A:N

AI Score

5.9

Confidence

Low

EPSS

0.001

Percentile

50.9%

Related for CVE-2007-0859