Vulnerabilities for 6131 nfc (...) - CXSECURITY.COM

Vulnerabilities for '6131 nfc'

2009-01-02

CVE-2008-5827

CWE-16

The Nokia 6131 Near Field Communication (NFC) phone with 05.12 firmware automatically installs software upon completing the download of a JAR file, which makes it easier for remote attackers to execute arbitrary code via a crafted URI record in an NDEF tag.

CVE-2008-5826

CWE-20

The Nokia 6131 Near Field Communication (NFC) phone with 05.12 firmware allows remote attackers to cause a denial of service (device crash) via (1) a large value in the payload length field in an NDEF record, or a certain length for a (2) tel: or (3) sms: NDEF URI.

CVE-2008-5825

CWE-59

The SmartPoster implementation on the Nokia 6131 Near Field Communication (NFC) phone with 05.12 firmware does not properly display the URI record when the Title record contains a certain combination of space, CR (aka \r), and . (dot) characters, which allows remote attackers to trick a user into loading an arbitrary URI via a crafted NDEF tag, as demonstrated by (1) an http: URI for a malicious web site, (2) a tel: URI for a premium-rate telephone number, and (3) an sms: URI that triggers purchase of a ringtone.

>>> Vendor: Nokia 38 Products

Ip440 firewall vpn appliance

Firewall appliance

Electronic documentation

Groupwise mobile server

Intellisync mobile suite

Intellisync wireless email express

Symbian s60 browser

N810 internet tablet

Multimedia player

@vantage commander

I-240w-q gpon ont firmware

8810 4g firmware

Bts trs web console

Copyright 2024, cxsecurity.com