CVSS: 5.0EPSS: 0%CPEs: 2EXPL: 1CVE-2010-1730
https://notcve.org/view.php?id=CVE-2010-1730
Dolphin Browser 2.5.0 on the HTC Hero allows remote attackers to cause a denial of service (application crash) via JavaScript that writes <marquee> sequences in an infinite loop. Dolphin Browser v2.5.0 sobre el HTC Hero permite a atacantes remotos provocar una denegación de servicio (caída de aplicación) a través de Javascript que escribe secuencias <marquee> en un bucle infinito. • http://h.ackack.net/?p=258 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVSS: 7.1EPSS: 8%CPEs: 2EXPL: 1CVE-2008-6775 – HTC Touch - vCard over IP Denial of Service
https://notcve.org/view.php?id=CVE-2008-6775
HTC Touch Pro and HTC Touch Cruise vCard allows remote attackers to cause denial of service (CPU consumption, SMS consumption, and connectivity loss) via a flood of vCards to UDP port 9204. HTC Touch Pro y HTC Touch Cruise vCard permite a atacantes remotos causar denegación de servicio (consumo de CPU, consumo de SMS, y pérdida de conectividad) a través de una avalancha de vCards a el puerto UDP 9204. • https://www.exploit-db.com/exploits/8125 http://archives.neohapsis.com/archives/fulldisclosure/2009-02/0370.html http://osvdb.org/52009 http://www.mseclab.com/index.php?page_id=110 http://www.securityfocus.com/archive/1/499416/100/0/threaded https://exchange.xforce.ibmcloud.com/vulnerabilities/47497 •
CVSS: 2.1EPSS: 0%CPEs: 2EXPL: 0CVE-2008-4540
https://notcve.org/view.php?id=CVE-2008-4540
Windows Mobile 6 on the HTC Hermes device makes WLAN passwords available to an auto-completion mechanism for the password input field, which allows physically proximate attackers to bypass password authentication and obtain WLAN access. Windows Mobile 6 en dispositivos HTC Hermes deja activado el mecanismo de auto-completado de las contraseñas de la WLAN, lo cual permite a atacantes físicamente próximos al dispositivo evitar la autenticación de la contraseña y obtener acceso a la WLAN. • http://securityreason.com/securityalert/4402 http://www.securityfocus.com/archive/1/497151/100/0/threaded https://exchange.xforce.ibmcloud.com/vulnerabilities/45857 • CWE-255: Credentials Management Errors •
CVSS: 5.4EPSS: 30%CPEs: 3EXPL: 1CVE-2008-4295 – Microsoft Windows Mobile 6.0 - Device Long Name Remote Reboot (Denial of Service)
https://notcve.org/view.php?id=CVE-2008-4295
Microsoft Windows Mobile 6.0 on HTC Wiza 200 and HTC MDA 8125 devices does not properly handle the first attempt to establish a Bluetooth connection to a peer with a long name, which allows remote attackers to cause a denial of service (device reboot) by configuring a Bluetooth device with a long hci name and (1) connecting directly to the Windows Mobile system or (2) waiting for the Windows Mobile system to scan for nearby devices. Microsoft Windows Mobile 6.0 en dispositivos HTC Wiza 200 y HTC MDA 8125 no trata adecuadamente el primer intento de establecer la conexión Bluetooth a un punto con un nombre largo, lo cual permite a atacantes remotos causar denegación de servicio (reinicio de dispositivo) por la configuración de un dispositivo Bluetooth con un nombre hci largo y (1) conexión directamente al sistema Windows Mobile o (2) esperar para escanear dispositivos cercanos del sistema Windows Mobile. • https://www.exploit-db.com/exploits/6582 http://secunia.com/advisories/32066 http://www.securityfocus.com/bid/31420 https://exchange.xforce.ibmcloud.com/vulnerabilities/45463 • CWE-20: Improper Input Validation •
CVSS: 7.8EPSS: 6%CPEs: 3EXPL: 0CVE-2007-3362
https://notcve.org/view.php?id=CVE-2007-3362
ageet AGEphone before 1.6.2, running on Windows Mobile 5 on the HTC HyTN Pocket PC device, allows remote attackers to (1) cause a denial of service (call disruption and device hang) via a SIP message with a malformed header and (2) cause a denial of service (call disruption, false ring indication, and device outage) via a SIP message with a malformed SDP delimiter. ageet AGEphone versiones anteriores a 1.6.2, corriendo en Windows Mobile 5 en dispositivo HTC HyTN Pocket PC, permite a atacantes remotos (1) provocar una denegación de servicio (interrupción de llamada y cuelgue de dispositivo) mediante un mensaje SIP con cabecera malformada y (2) provocar una denegación de servicio (interrupción de llamada, indicación de llamada falsa, y apagado de dispositivo) mediante un menaje SIP con delimitador SDP malformado. • http://osvdb.org/37729 http://secunia.com/advisories/25781 http://www.ageet.com/us/agephone/help/index.htm#vers http://www.securityfocus.com/bid/24540 http://www.securityfocus.com/bid/24543 http://www.sipera.com/index.php?action=resources%2Cthreat_advisory&tid=214& http://www.sipera.com/index.php?action=resources%2Cthreat_advisory&tid=215& https://exchange.xforce.ibmcloud.com/vulnerabilities/35067 •