← Back

CVE-2008-4295

nvd nist
Published: Sep 27, 2008Modified: Apr 23, 2026

JSON object

Loading...
5.4
Vector
AV:N/AC:H/Au:N/C:N/I:N/A:C
Exploitability: 4.9 / Impact: 6.9
Source: NVD

Description

Microsoft Windows Mobile 6.0 on HTC Wiza 200 and HTC MDA 8125 devices does not properly handle the first attempt to establish a Bluetooth connection to a peer with a long name, which allows remote attackers to cause a denial of service (device reboot) by configuring a Bluetooth device with a long hci name and (1) connecting directly to the Windows Mobile system or (2) waiting for the Windows Mobile system to scan for nearby devices.

Affected (1)

Microsoft
1 product
Windows Mobile
Configuration A
1 vulnerable · 2 platform
Vulnerable SoftwareAffected Versions
Windows Mobile
Version 6.0
Running on/withPlatform Versions
Htc
Mda
Version 8125
Htc
Wiza
Version 200

Related CWEs

CWE-20
Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.

References (8)

Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: cve@mitre.org
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108
Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.