CVE-2006-6908: Buffer Overflow
First published: Sun Dec 31 2006(Updated: )
Buffer overflow in the Bluetooth Stack COM Server in the Widcomm Bluetooth stack, as packaged as Widcomm Stack 3.x and earlier on Windows, Widcomm BTStackServer 1.4.2.10 and 1.3.2.7 on Windows, Widcomm Bluetooth Communication Software 1.4.1.03 on Windows, and the Bluetooth implementation in Windows Mobile or Windows CE on the HP IPAQ 2215 and 5450, allows remote attackers to cause a denial of service (service crash) and possibly execute arbitrary code via unspecified vectors.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Widcomm Bluetooth Software | =1.4.1.03 | |
| Widcomm Bluetooth Software | =1.3.2.7 | |
| Widcomm Bluetooth Software | <=3 | |
| Windows Mobile Connectivity Tools | ||
| Microsoft Windows CE | ||
| Widcomm Bluetooth Software | =1.4.2.10 | |
| Microsoft Windows Embedded |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2006-6908?
CVE-2006-6908 has a high severity due to its potential for remote code execution through a buffer overflow.
What systems are affected by CVE-2006-6908?
CVE-2006-6908 affects several versions of the Widcomm Bluetooth stack, specifically versions 1.3.2.7, 1.4.1.03, and up to 3.x, along with Windows Mobile and Windows CE.
How do I fix CVE-2006-6908?
To mitigate CVE-2006-6908, users should upgrade to the latest version of the Widcomm Bluetooth software that addresses this vulnerability.
What kind of attack does CVE-2006-6908 enable?
CVE-2006-6908 allows an attacker to exploit a buffer overflow in the Bluetooth stack, potentially leading to arbitrary code execution.
Is CVE-2006-6908 a zero-day vulnerability?
CVE-2006-6908 is not a zero-day vulnerability as it was publicly disclosed and has known mitigation strategies.
- agent/type
- agent/first-publish-date
- collector/mitre-cve
- source/MITRE
- agent/severity
- agent/weakness
- agent/last-modified-date
- agent/references
- agent/description
- agent/event
- agent/source
- agent/author
- agent/tags
- agent/softwarecombine
- collector/nvd-historical
- agent/software-canonical-lookup-request
- collector/nvd-api
- collector/nvd-index
- vendor/broadcom
- canonical/widcomm bluetooth software
- version/widcomm bluetooth software/1.4.1.03
- version/widcomm bluetooth software/1.3.2.7
- version/widcomm bluetooth software/3
- vendor/microsoft
- canonical/windows mobile connectivity tools
- canonical/microsoft windows ce
- version/widcomm bluetooth software/1.4.2.10
- canonical/microsoft windows embedded