Microsoft Optical Desktop Wireless Keyboard Weak Encryption Information Disclosure Vulnerability

Bugtraq ID:	26693
Class:	Design Error
CVE:
Remote:	Yes
Local:	No
Published:	Dec 04 2007 12:00AM
Updated:	Dec 04 2007 09:12PM
Credit:	Max Moser and Philipp Schroedel are credited with the discovery of this vulnerability.
Vulnerable:	Microsoft Wireless Optical Desktop 2000 Microsoft Wireless Optical Desktop 1000
Not Vulnerable:

Microsoft Optical Desktop Wireless Keyboard Weak Encryption Information Disclosure Vulnerability

Microsoft Optical Desktop is prone to an information-disclosure vulnerability.

Successfully exploiting this issue will allow an attacker to obtain sensitive information that may lead to other attacks.

This issue affects Microsoft Optical Desktop 1000 and 2000; other versions may also be affected.

Microsoft Optical Desktop Wireless Keyboard Weak Encryption Information Disclosure Vulnerability

Currently we are not aware of any working exploits for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Microsoft Optical Desktop Wireless Keyboard Weak Encryption Information Disclosure Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Microsoft Optical Desktop Wireless Keyboard Weak Encryption Information Disclosure Vulnerability

References:

• Microsoft Wireless Optical Desktop Homepage (Microsoft)
  
• World first: 27Mhz based wireless security insecurities (Max Moser and Philipp Schroedel)