CVE-2008-5825: Low severity Nokia 6131 Nfc vulnerability
The SmartPoster implementation on the Nokia 6131 Near Field Communication (NFC) phone with 05.12 firmware does not properly display the URI record when the Title record contains a certain combination of space, CR (aka \r), and . (dot) characters, which allows remote attackers to trick a user into loading an arbitrary URI via a crafted NDEF tag, as demonstrated by (1) an http: URI for a malicious web site, (2) a tel: URI for a premium-rate telephone number, and (3) an sms: URI that triggers purchase of a ringtone.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2008-5825?
CVE-2008-5825 has a moderate severity level due to the potential for user deception and information compromise.
How do I fix CVE-2008-5825?
To mitigate CVE-2008-5825, users should update their Nokia 6131 NFC phone firmware to the latest version available.
What type of attack does CVE-2008-5825 enable?
CVE-2008-5825 enables URI spoofing attacks that could trick users into visiting malicious links.
What systems are affected by CVE-2008-5825?
CVE-2008-5825 specifically affects the Nokia 6131 NFC phone running firmware version 05.12.
When was CVE-2008-5825 published?
CVE-2008-5825 was published in November 2008, highlighting security concerns in the Nokia 6131 NFC.