Sony Ericsson Multiple Phones Remote Denial of Service Vulnerability

Bugtraq ID:	16512
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Feb 06 2006 12:00AM
Updated:	Feb 06 2006 12:00AM
Credit:	Discovered by Pierre Betouin <[email protected]> using Bluetooh Stack Smasher (BSS).
Vulnerable:	Sony Ericsson W800i 0 Sony Ericsson V600i 0 Sony Ericsson T68i 0 Sony Ericsson K600i 0
Not Vulnerable:

Sony Ericsson Multiple Phones Remote Denial of Service Vulnerability


Multiple Phones by Sony Ericsson are prone to a remote denial-of-service vulnerability. The vulnerability presents itself when the devices handle a specially crafted raw L2CAP packet.

Sony Ericsson K600i, V600i, W800i, T68i are reported to be vulnerable. Other devices may be affected as well.

Sony Ericsson Multiple Phones Remote Denial of Service Vulnerability


Exploit code is available.

• /data/vulnerabilities/exploits/sony_bluetooth_dos.c

Sony Ericsson Multiple Phones Remote Denial of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected]

Sony Ericsson Multiple Phones Remote Denial of Service Vulnerability

References:

• Sony Ericsson Mobile Communications (Sony)
  
• Bluetooth : DoS on Sony/Ericsson cell phones (Research Infratech )