CVE Details for CVE: CVE-2001-1438
Summary
Handspring Visor 1.0 and 1.0.1 with the VisorPhone Springboard module installed allows remote attackers to cause a denial of service (PalmOS crash and VisorPhone database corruption) by sending a large or crafted SMS image.
Timestamps
Last major update 11-07-2017 - 01:29
Published 22-10-2001 - 04:00
Last modified 11-07-2017 - 01:29
Vulnerable Configurations
  • cpe:2.3:o:palm:palm_os:*:*:*:*:*:*:*:*
    cpe:2.3:o:palm:palm_os:*:*:*:*:*:*:*:*
  • cpe:2.3:h:handspring:visor:1.0:*:*:*:*:*:*:*
    cpe:2.3:h:handspring:visor:1.0:*:*:*:*:*:*:*
  • cpe:2.3:h:handspring:visor:1.0.1:*:*:*:*:*:*:*
    cpe:2.3:h:handspring:visor:1.0.1:*:*:*:*:*:*:*
CAPEC
Click the CAPEC title to display a description
CVSS
Base
5.0
Impact
2.9
Exploitability
10.0
Access
VectorComplexityAuthentication
NETWORK LOW NONE
Impact
ConfidentialityIntegrityAvailability
NONE NONE PARTIAL
CVSS3
None
VIA4 references
cvss-vector via4
AV:N/AC:L/Au:N/C:N/I:N/A:P
refmap via4
cert-vn VU#222739
vuln-dev 20011022 PalmOS crashes receiving SMS images using Handspring VisorPhone
xf handspring-visor-sms-dos(10637)