Windows Mobile (Microsoft) - vulnerabilities (CVEs)
9 CVEs, 0 in the last 30 days, 15 known versions, newest CVE from 2009-01-21. Vendor: Microsoft.
CVEs of Windows Mobile
- CVE-2009-0244 - CVSS 8.8 (high), 2009-01-21: Directory traversal vulnerability in the OBEX FTP Service in the Microsoft Bluetooth stack in Windows Mobile 6 Professional, and probably Windows Mobile 5.0…
- CVE-2008-4540 - CVSS 2.1 (low), 2008-10-13: Windows Mobile 6 on the HTC Hermes device makes WLAN passwords available to an auto-completion mechanism for the password input field, which allows physically…
- CVE-2008-4295 - CVSS 5.4 (medium), 2008-09-27: Microsoft Windows Mobile 6.0 on HTC Wiza 200 and HTC MDA 8125 devices does not properly handle the first attempt to establish a Bluetooth connection to a peer…
- CVE-2007-5493 - CVSS 4.3 (medium), 2007-10-18: The SMS handler for Windows Mobile 2005 Pocket PC Phone edition allows attackers to hide the sender field of an SMS message via a malformed WAP PUSH message…
- CVE-2007-5460 - CVSS 4.6 (medium), 2007-10-15: Microsoft ActiveSync 4.1, as used in Windows Mobile 5.0, uses weak encryption (XOR obfuscation with a fixed key) when sending the user's PIN/Password over the…
- CVE-2007-0878 - CVSS 7.8 (high), 2007-02-12: Unspecified vulnerability in Microsoft Internet Explorer on Windows Mobile 5.0 allows remote attackers to cause a denial of service (loss of browser and other…
- CVE-2007-0685 - CVSS 2.6 (low), 2007-02-03: Internet Explorer on Windows Mobile 5.0 and Windows Mobile 2003 and 2003SE for Smartphones and PocketPC allows attackers to cause a denial of service…
- CVE-2007-0674 - CVSS 7.1 (high), 2007-02-03: Pictures and Videos on Windows Mobile 5.0 and Windows Mobile 2003 and 2003SE for Smartphones and PocketPC allows user-assisted remote attackers to cause a…
- CVE-2006-6908 - CVSS 10 (critical), 2006-12-31: Buffer overflow in the Bluetooth Stack COM Server in the Widcomm Bluetooth stack, as packaged as Widcomm Stack 3.x and earlier on Windows, Widcomm…
