Microsoft Windows Mobile Multiple Remote Denial of Service Vulnerabilities

Bugtraq ID:	22343
Class:	Failure to Handle Exceptional Conditions
CVE:	CVE-2007-0685 CVE-2007-0674
Remote:	Yes
Local:	No
Published:	Jan 31 2007 12:00AM
Updated:	Jul 05 2016 10:21PM
Credit:	Trend Micro is credited with the discovery of these issues.
Vulnerable:	Microsoft Windows Mobile Smartphone Microsoft Windows Mobile for Pocket PC Phone 2003 Microsoft Windows Mobile 2003 SE 0 Microsoft Windows Mobile 5.0 Microsoft Windows Mobile 2003
Not Vulnerable:

Microsoft Windows Mobile Multiple Remote Denial of Service Vulnerabilities

Microsoft Windows Mobile is prone to two remote denial-of-service vulnerabilities because the software fails to properly handle malformed remote data.

Successfully exploiting these issues may allow an attacker to hang or crash the application, denying service to legitimate users.

Microsoft Windows Mobile Multiple Remote Denial of Service Vulnerabilities

Currently we are not aware of any exploits for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Microsoft Windows Mobile Multiple Remote Denial of Service Vulnerabilities

Solution:
Currently we are not aware of any vendor-supplied patches for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Microsoft Windows Mobile Multiple Remote Denial of Service Vulnerabilities

References:

• Vulnerability in Internet Explorer for Windows Mobile (Trend Micro)
  
• Vulnerability in Windows Mobile Pictures & Videos Could Allow Denial of Service (Trend Micro)
  
• Windows Mobile Homepage (Microsoft)