Toshiba Bluetooth Stack Unspecified Remote Memory Corruption Vulnerability
BID:20489
Info
Toshiba Bluetooth Stack Unspecified Remote Memory Corruption Vulnerability
| Bugtraq ID: | 20489 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 12 2006 12:00AM |
| Updated: | Oct 25 2006 09:38PM |
| Credit: | Discovery is credited to David Maynor of SecureWorks, Inc. and Jon Ellch. |
| Vulnerable: |
Toshiba Bluetooth Stack 4.0.23 Toshiba Bluetooth Stack 4.0.11 (for Dell) Toshiba Bluetooth Stack 4 Toshiba Bluetooth Stack 3 |
| Not Vulnerable: |
Toshiba Bluetooth Stack 4.20.1 Toshiba Bluetooth Stack 4.0.35 Toshiba Bluetooth Stack 4 SP2 |
Discussion
Toshiba Bluetooth Stack Unspecified Remote Memory Corruption Vulnerability
Toshiba Bluetooth Stack is prone to an unspecified remote memory-corruption vulnerability.
Successfully exploiting this issue allows remote attackers to execute arbitrary machine code in the context of the kernel running the affected software, facilitating the complete compromise of affected computers. Failed exploit attempts likely result in denial-of-service conditions.
Versions 3 through 4.00.35 of the Toshiba Bluetooth stack are vulnerable to this issue. OEM vendors such as Dell, Sony, ASUS, and potentially others include vulnerable versions of the affected software.
This issue may potentially be related to the one described in BID 18527 (Toshiba Bluetooth Stack TOSRFBD.SYS Remote Denial of Service Vulnerability), but this has not been confirmed.
Toshiba Bluetooth Stack is prone to an unspecified remote memory-corruption vulnerability.
Successfully exploiting this issue allows remote attackers to execute arbitrary machine code in the context of the kernel running the affected software, facilitating the complete compromise of affected computers. Failed exploit attempts likely result in denial-of-service conditions.
Versions 3 through 4.00.35 of the Toshiba Bluetooth stack are vulnerable to this issue. OEM vendors such as Dell, Sony, ASUS, and potentially others include vulnerable versions of the affected software.
This issue may potentially be related to the one described in BID 18527 (Toshiba Bluetooth Stack TOSRFBD.SYS Remote Denial of Service Vulnerability), but this has not been confirmed.
Exploit / POC
Toshiba Bluetooth Stack Unspecified Remote Memory Corruption Vulnerability
Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.
Solution / Fix
Toshiba Bluetooth Stack Unspecified Remote Memory Corruption Vulnerability
Solution:
The vendor has released updates to address this issue. Please see the references for more information on obtaining and applying fixes.
Solution:
The vendor has released updates to address this issue. Please see the references for more information on obtaining and applying fixes.
References
Toshiba Bluetooth Stack Unspecified Remote Memory Corruption Vulnerability
References:
References:
- Bluetooth Stack Downloads (Toshiba)
- Toshiba Homepage (Toshiba)
- SecureWorks Research Client Advisory: Multiple Vendor Bluetooth Memory Stack Cor ("Research"