ID CVE-2006-6908
Summary Buffer overflow in the Bluetooth Stack COM Server in the Widcomm Bluetooth stack, as packaged as Widcomm Stack 3.x and earlier on Windows, Widcomm BTStackServer 1.4.2.10 and 1.3.2.7 on Windows, Widcomm Bluetooth Communication Software 1.4.1.03 on Windows, and the Bluetooth implementation in Windows Mobile or Windows CE on the HP IPAQ 2215 and 5450, allows remote attackers to cause a denial of service (service crash) and possibly execute arbitrary code via unspecified vectors.
References
Vulnerable Configurations
  • cpe:2.3:a:broadcom:widcomm_bluetooth:1.4.1.03:*:windows:*:*:*:*:*
    cpe:2.3:a:broadcom:widcomm_bluetooth:1.4.1.03:*:windows:*:*:*:*:*
  • cpe:2.3:o:broadcom:widcomm_bluetooth:1.3.2.7:*:windows:*:*:*:*:*
    cpe:2.3:o:broadcom:widcomm_bluetooth:1.3.2.7:*:windows:*:*:*:*:*
  • cpe:2.3:a:broadcom:widcomm_bluetooth:*:*:windows:*:*:*:*:*
    cpe:2.3:a:broadcom:widcomm_bluetooth:*:*:windows:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_mobile:*:*:*:*:*:*:*:*
    cpe:2.3:o:microsoft:windows_mobile:*:*:*:*:*:*:*:*
  • cpe:2.3:o:broadcom:widcomm_bluetooth:1.4.2.10:*:windows:*:*:*:*:*
    cpe:2.3:o:broadcom:widcomm_bluetooth:1.4.2.10:*:windows:*:*:*:*:*
  • cpe:2.3:o:microsoft:windows_embedded_compact:*:*:*:*:*:*:*:*
    cpe:2.3:o:microsoft:windows_embedded_compact:*:*:*:*:*:*:*:*
CVSS
Base: 10.0 (as of 15-12-2023 - 19:06)
Impact:
Exploitability:
CWE NVD-CWE-Other
CAPEC
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
COMPLETE COMPLETE COMPLETE
cvss-vector via4 AV:N/AC:L/Au:N/C:C/I:C/A:C
refmap via4
bugtraq 20070104 23C3 - Bluetooth hacking revisted [Summary and Code]
misc http://events.ccc.de/congress/2006-mediawiki//images/f/fb/23c3_Bluetooh_revisited.pdf
osvdb 37587
Last major update 15-12-2023 - 19:06
Published 31-12-2006 - 05:00
Last modified 15-12-2023 - 19:06
Back to Top