CVE-2007-4213

CVE-2007-4213 affects Palm OS on Treo smartphones (650, 680, 700p, 755p). A remote attacker can cause a denial of service (device reset/hang) by sending a flood of large ICMP echo requests to the device, typically via the data network. The issue is described in Symantec’s SYMSA-2007-007 advisory,...

CVE-2001-1438

The CVE-2001-1438 entry concerns Handspring Visor devices (version 1.0 and 1.0.1) with the VisorPhone Springboard module installed. The vulnerability arises from handling of a large or crafted SMS image, allowing remote attackers to cause a PalmOS crash and VisorPhone database corruption (denial ...

CVE-2000-1008

PalmOS 3.5.2 and earlier uses weak encryption to store the user password, allowing attackers with physical access to decrypt the password and gain access to the device. The vulnerability affects the password storage mechanism and is exploitable only with local access; no exploit details or mitiga...

CVE-2001-0157

Palm OS 3.5.2 and earlier is affected by a debugging utility in the backdoor mode that lets an attacker with physical access bypass access restrictions and obtain passwords despite a lockout mechanism. The available sources do not specify a patch or remediation steps. Exploit specifics are not pr...

CVE-2002-0116

CVE-2002-0116 describes a denial-of-service in Palm OS 3.5h and possibly earlier versions used in Handspring Visor and Xircom devices. A remote attacker can trigger the DoS via a TCP connect scan (e.g., using nmap) over the network. The connected documents do not provide vendor-specific patch ver...