CVE-2007-0685 Denial of service in n/a
Attackers can crash Internet Explorer on Windows Mobile devices via unspecified vectors, causing device instability.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2007-0685?
CVE-2007-0685 is a low-severity denial of service vulnerability in n/a, published on 3 Feb 2007. An attacker can exploit it over the internet without logging in, and only if a user opens a file or follows a link.
Official description
Internet Explorer on Windows Mobile 5.0 and Windows Mobile 2003 and 2003SE for Smartphones and PocketPC allows attackers to cause a denial of service (application crash and device instability) via unspecified vectors, possibly related to a buffer overflow.
Which versions are affected by CVE-2007-0685?
It affects 1 product.
Products include Microsoft Windows Mobile.
How do I fix CVE-2007-0685?
No fix has been published for CVE-2007-0685 yet. Limit exposure of the affected software until one is available.
Upgrade, then put limits on request size, rate and nesting depth so one client cannot exhaust the service. More about Denial of service.
Is CVE-2007-0685 being exploited?
There is no known exploitation of CVE-2007-0685 in the wild and no public exploit code.
Other vulnerabilities in n/a
- CVE-2009-0244 Path traversal in n/a
- CVE-2007-0878 Unspecified vulnerability in Microsoft Internet Explorer on Windows Mobile 5.0 allows remote attackers to cause a denial of service (loss of
- CVE-2007-0674 Denial of service in n/a
- CVE-2008-4295 Denial of service in n/a
- CVE-2007-5460 Weak cryptography in n/a
Sources
Also known as GHSA-8pv2-pgqp-f6m6.