|
Nokia 6210 vCard Denial of Service
|
|
Secunia Advisory:
|
SA8156
|
|
|
Release Date:
|
2003-02-26
|
|
Popularity:
|
6,302 views
|
|
|
Critical:
|
Not critical
|
|
Impact:
|
DoS
|
|
Where:
|
From remote
|
|
Solution Status:
|
Unpatched
|
|
| OS: | Nokia 6210
|
|
|
Subscribe:
|
Instant alerts on relevant vulnerabilities 
|
|
| CVE reference: | CVE-2003-0103
|
|
Description:
A vulnerability in the Nokia 6210 cellular phone can be exploited by a malicious person to conduct a DoS attack (Denial of Service) on a vulnerable phone.
The vulnerability is caused by a format string error in the code handling Multi-Part vCards. This can be exploited to crash a user's phone or force it to restart by sending a malicious vCard.
Solution:
Nokia has reported that there are no plans to address the issue with a software fix.
There is no efficient workaround available to users. If the vulnerability is being exploited on a user's phone resulting in a crash, the phone can be restarted by removing the battery.
Provided and/or discovered by:
Ollie Whitehouse, @stake
Original Advisory:
http://www.atstake.com/research/advisories/2003/a022503-1.txt
|
|
|
Track this Secunia Advisory
|
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released.
Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.
|
|
|
About this Secunia Advisory
|
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise.
Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.
|
