Vulnerability CVE-2004-0775
Published: 2004-10-20   Modified: 2012-02-12

Description:
Buffer overflow in WIDCOMM Bluetooth Connectivity Software, as used in products such as BTStackServer 1.3.2.7 and 1.4.2.10, Windows XP and Windows 98 with MSI Bluetooth Dongles, and HP IPAQ 5450 running WinCE 3.0, allows remote attackers to execute arbitrary code via certain service requests.

Type:

CWE-Other

CVSS2 => (AV:N/AC:L/Au:N/C:P/I:P/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
7.5/10
6.4/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
Partial
Partial
Affected software
Widcomm -> Bluetooth communication software 
Widcomm -> Btstackserver 

 References:
http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0029.html
http://marc.info/?l=bugtraq&m=109223783402624&w=2
http://www.internetnews.com/security/article.php/3394181
http://www.pentest.co.uk/documents/ptl-2004-03.html
http://www.securityfocus.com/archive/1/418633/100/0/threaded
https://exchange.xforce.ibmcloud.com/vulnerabilities/16953
Copyright 2024, cxsecurity.com

 

Back to Top