Siemens Mobile Phones %IMG_NAME Denial Of Service Vulnerability

Bugtraq ID:	7507
Class:	Boundary Condition Error
CVE:
Remote:	Yes
Local:	No
Published:	May 06 2003 12:00AM
Updated:	May 06 2003 12:00AM
Credit:	Discovery of this issue is credited to subj <[email protected]>.
Vulnerable:	Siemens S45 Siemens M45
Not Vulnerable:

Siemens Mobile Phones %IMG_NAME Denial Of Service Vulnerability

Siemens Mobile Phones are prone to a denial of service when handling malformed image attachments in SMS messages. This is reportedly due to a boundary condition error that occurs when an overly large image name is included in a SMS message. This vulnerability was reported in Siemens *45 Series phones, but other phones may also be affected.

Siemens Mobile Phones %IMG_NAME Denial Of Service Vulnerability

There is no exploit code required.

Siemens Mobile Phones %IMG_NAME Denial Of Service Vulnerability

Solution:
Currently we are not aware of any vendor-supplied patches for this issue. If you feel we are in error or are aware of more recent information, please mail us at: [email protected] <mailto:[email protected]>.

Siemens Mobile Phones %IMG_NAME Denial Of Service Vulnerability

References:

• Mobile phone homepage (Siemens)
  
• Siemens Mobile Phone - Buffer Overflow (subj )