CVE-2007-5493

Published: Oct 18, 2007Modified: Apr 23, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:P/A:N

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

The SMS handler for Windows Mobile 2005 Pocket PC Phone edition allows attackers to hide the sender field of an SMS message via a malformed WAP PUSH message that causes the PDU to be incorrectly decoded.

Affected (1)

Products: Microsoft: Windows Mobile

Microsoft

1 product

Windows Mobile

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Microsoft Windows Mobile	Version 2005

Related CWEs

CWE-264

References (12)

http://osvdb.org/45517

Source: cve@mitre.org

http://securitytracker.com/id?1018832

Source: cve@mitre.org

http://www.securityfocus.com/archive/1/482446/100/0/threaded

Source: cve@mitre.org

http://www.securityfocus.com/bid/26091

Source: cve@mitre.org

http://www.symantec.com/content/en/us/enterprise/research/SYMSA-2007-011.txt

Source: cve@mitre.org

https://exchange.xforce.ibmcloud.com/vulnerabilities/37249

Source: cve@mitre.org

http://osvdb.org/45517