CVE-2003-1464 Memory corruption in n/a

High 7.8 Published Updated

Remote attackers can cause denial of service on Siemens 45 series phones by sending SMS messages with long image names.

Exploited in the wild
Not known
Login needed
Not needed
Attackable
Over the internet
Victim action needed
Not needed
Fix
None listed

What is CVE-2003-1464?

CVE-2003-1464 is a high-severity memory corruption vulnerability in n/a, published on 24 Oct 2007. An attacker can exploit it over the internet without logging in, with no action from the victim.

Official description

Buffer overflow in Siemens 45 series mobile phones allows remote attackers to cause a denial of service (disconnect and unavailable inbox) via a Short Message Service (SMS) message with a long image name.

Weakness: CWE-119

Which versions are affected by CVE-2003-1464?

It affects 2 products.

Products include Siemens M45, Siemens S45.

How do I fix CVE-2003-1464?

No fix has been published for CVE-2003-1464 yet. Limit exposure of the affected software until one is available.

Upgrade to the fixed version. Memory-safe languages, compiler hardening and fuzzing prevent most new cases. More about Memory corruption.

Is CVE-2003-1464 being exploited?

There is no known exploitation of CVE-2003-1464 in the wild and no public exploit code.

Sources

Also known as GHSA-jx9r-h4g2-r43w.

Is CVE-2003-1464 in your software?

Upload an SBOM and sbomify checks it against every vulnerability here, every day.

Check your SBOMs for free