CVE-2008-4295: Input Validation
Microsoft Windows Mobile 6.0 on HTC Wiza 200 and HTC MDA 8125 devices does not properly handle the first attempt to establish a Bluetooth connection to a peer with a long name, which allows remote attackers to cause a denial of service (device reboot) by configuring a Bluetooth device with a long hci name and (1) connecting directly to the Windows Mobile system or (2) waiting for the Windows Mobile system to scan for nearby devices.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-4295?
CVE-2008-4295 has a medium severity level as it can cause a device reboot due to a denial of service.
How do I fix CVE-2008-4295?
To fix CVE-2008-4295, update the affected devices to the latest software version that addresses this vulnerability.
Which devices are affected by CVE-2008-4295?
CVE-2008-4295 affects Microsoft Windows Mobile 6.0 specifically on HTC Wiza 200 and HTC MDA 8125 devices.
What type of vulnerability is CVE-2008-4295?
CVE-2008-4295 is a denial of service vulnerability that can be exploited via Bluetooth connections.
Can CVE-2008-4295 be exploited remotely?
Yes, CVE-2008-4295 can be exploited remotely by attackers establishing a Bluetooth connection with a specially configured device.