Microsoft Windows CE POP3 Remote Denial of Service Vulnerability

Bugtraq ID:	24469
Class:	Unknown
CVE:
Remote:	Yes
Local:	No
Published:	Oct 08 2003 12:00AM
Updated:	Jun 14 2007 12:59AM
Credit:	The vendor reported this issue.
Vulnerable:	Microsoft Windows CE 4.2
Not Vulnerable:

Microsoft Windows CE POP3 Remote Denial of Service Vulnerability

Microsoft Windows CE is prone to a remote denial-of-service vulnerability.

This issue affects only Windows CE running on Texas Instruments TI 925T CPU (ARMV4).

Successful exploits will crash the affected device running the vulnerable operating system. Users will have to reset the affected device to recover.

Windows CE 4.2 is vulnerable to this issue.

Microsoft Windows CE POP3 Remote Denial of Service Vulnerability

Currently we are not aware of any exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: mailto:[email protected].

Microsoft Windows CE POP3 Remote Denial of Service Vulnerability

Solution:
The vendor released fixes to address this issue. Please see the references for more information.

Microsoft Windows CE POP3 Remote Denial of Service Vulnerability

References:

• Microsoft Windows CE Homepage (Microsoft)
  
• The Elephant Under the Carpet (and when I say "carpet" I mean PDA) (Symantec )
  
• FIX: Updated Encryption Components (Microsoft)