Microsoft Windows CE TCP/IP Requests Denial of Service Vulnerability

Bugtraq ID:	24424
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	May 27 2005 12:00AM
Updated:	Jun 12 2007 06:09PM
Credit:	The vendor disclosed this issue. Ollie Whitehouse is credited with reporting this issue as a security vulnerability.
Vulnerable:	Microsoft Windows CE 4.2
Not Vulnerable:

Microsoft Windows CE TCP/IP Requests Denial of Service Vulnerability

Windows CE is prone to a denial-of-service vulnerability.

An attacker can exploit this issue to deny TCP/IP service to an affected device.

Very few details are known regarding this issue. We will update this BID as more information emerges.

Windows CE 4.2 is vulnerable; other versions may also be affected.

Microsoft Windows CE TCP/IP Requests Denial of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].

Microsoft Windows CE TCP/IP Requests Denial of Service Vulnerability

Solution:
The vendor recognizes this issue as a bug and has released a fix. Please see the references for more information.

Microsoft Windows CE TCP/IP Requests Denial of Service Vulnerability

References:

• KB837392 - How to locate core operating system fixes for Microsoft Windows CE Pl (Microsoft)
  
• Microsoft Windows CE Homepage (Microsoft)
  
• The Elephant Under the Carpet (and when I say "carpet" I mean PDA) (Ollie Whitehouse)
  
• FIX: A Windows CE .NET 4.2-based device may stop responding to incoming TCP/IP r (Microsoft)