vendor:
9500 handset vCard viewer
by:
SecurityFocus
7.5
CVSS
HIGH
Remote Denial of Service
119
CWE
Product Name: 9500 handset vCard viewer
Affected Version From: N/A
Affected Version To: N/A
Patch Exists: NO
Related CWE: N/A
CPE: N/A
Metasploit:
N/A
Other Scripts:
N/A
Tags: N/A
CVSS Metrics: N/A
Nuclei References:
N/A
Nuclei Metadata: N/A
Platforms Tested: N/A
2005
Nokia 9500 handset vCard viewer Remote Denial of Service Vulnerability
Nokia 9500 handset vCard viewer is affected by a remote denial of service vulnerability. This issue presents itself when the device handles a malformed vCard and fails to perform boundary checks prior to copying user-supplied data into a finite sized buffer. Successful exploitation of this issue requires user interaction as a user is asked to accept the vCard followed by manually opening it.
Mitigation:
Ensure that boundary checks are performed prior to copying user-supplied data into a finite sized buffer.