CVE-2007-0859

Sažetak

The Find feature in Palm OS Treo smart phones operates despite the system password lock, which allows attackers with physical access to obtain sensitive information (memory contents) by doing (1) text searches or (2) paste operations after pressing certain keyboard shortcut keys.

Reference

http://discussion.treocentral.com/showthread.php?p=1199445&posted=1#post1199445
http://osvdb.org/33724
http://securityreason.com/securityalert/2260
http://www.securityfocus.com/archive/1/460059/100/0/threaded
http://www.securityfocus.com/archive/1/460328/100/0/threaded
http://www.securityfocus.com/archive/1/460901/100/0/threaded
http://www.securityfocus.com/archive/1/460908/100/0/threaded
http://www.securityfocus.com/archive/1/460911/100/0/threaded
http://www.securityfocus.com/archive/1/460954/100/0/threaded
http://www.securityfocus.com/bid/22468
http://www.symantec.com/enterprise/research/SYMSA-2007-002.txt
https://exchange.xforce.ibmcloud.com/vulnerabilities/32502

CVSS

Base:	2.1
Impact:	2.9
Exploitability:	3.9

Pristup

Vektor	Složenost	Autentikacija
LOCAL	LOW	NONE

Impact

Povjerljivost	Cjelovitost	Dostupnost
PARTIAL	NONE	NONE

CVSS vektor

AV:L/AC:L/Au:N/C:P/I:N/A:N

Zadnje važnije ažuriranje

16-10-2018 - 16:34

Objavljeno

16-02-2007 - 00:28