[security bulletin] HPSBMI02573 SSRT100227 rev.1 - Palm webOS, webOS Doc Viewer, Execution of Arbitrary Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02498311 Version: 1 HPSBMI02573 SSRT100227 rev.1 - Palm webOS, webOS Doc Viewer, Execution of Arbitrary Code NOTICE: The information in this Security Bulletin should be acted upon as soon as...

CVE-2010-4025

CVE-2010-4025 affects Palm webOS 1.4.1's Doc Viewer. A crafted Word document could allow remote code execution. HP’s security bulletin HPSBMI02573 rev.1 recommends updating to webOS 1.4.5+ (or later) to mitigate; until then, avoid untrusted Word docs. The HP bulletin lists CVSS v2 base 6.8 (AV:L/...