CVE-2006-3146

CVSS V2 Medium 5 CVSS V3 None
Description
The TOSRFBD.SYS driver for Toshiba Bluetooth Stack 4.00.29 and earlier on Windows allows remote attackers to cause a denial of service (reboot) via a L2CAP echo request that triggers an out-of-bounds memory access, similar to "Ping o' Death" and as demonstrated by BlueSmack. NOTE: this issue was originally reported for 4.00.23.
Overview
  • CVE ID
  • CVE-2006-3146
  • Assigner
  • cve@mitre.org
  • Vulnerability Status
  • Modified
  • Published Version
  • 2006-06-22T22:06:00
  • Last Modified Date
  • 2018-10-18T16:46:05
Weakness Enumerations
CWE URL
CWE-119 http://cwe.mitre.org/data/definitions/119.html
CPE Configuration (Product)
CPE Vulnerable Operator Version Start Version End
AND
cpe:2.3:a:toshiba:bluetooth_stack:*:*:*:*:*:*:*:* 1 OR 4.00.29
cpe:2.3:a:toshiba:bluetooth_stack:3.00.11:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:toshiba:bluetooth_stack:3.00.12:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:toshiba:bluetooth_stack:3.00.31a:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:toshiba:bluetooth_stack:3.00.32:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:toshiba:bluetooth_stack:3.01.03:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:toshiba:bluetooth_stack:3.10.00:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:toshiba:bluetooth_stack:3.20.00:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:toshiba:bluetooth_stack:3.20.01:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:toshiba:bluetooth_stack:3.20.02:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:toshiba:bluetooth_stack:3.20.04:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:toshiba:bluetooth_stack:4.00.01t:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:toshiba:bluetooth_stack:4.00.11:*:*:*:*:*:*:* 1 OR
cpe:2.3:a:toshiba:bluetooth_stack:4.00.23:*:*:*:*:*:*:* 1 OR
cpe:2.3:o:microsoft:windows:*:*:*:*:*:*:*:* 0 OR
CVSS Version 2
  • Version
  • 2.0
  • Vector String
  • AV:N/AC:L/Au:N/C:N/I:N/A:P
  • Access Vector
  • NETWORK
  • Access Compatibility
  • LOW
  • Authentication
  • NONE
  • Confidentiality Impact
  • NONE
  • Integrity Impact
  • NONE
  • Availability Impact
  • PARTIAL
  • Base Score
  • 5
  • Severity
  • MEDIUM
  • Exploitability Score
  • 10
  • Impact Score
  • 2.9
References
Reference URL Reference Tags
http://www.securityfocus.com/bid/18527 Exploit
http://trifinite.org/trifinite_advisory_toshiba.html Vendor Advisory
http://secunia.com/advisories/20657 Patch Vendor Advisory
http://securitytracker.com/id?1016345
http://www.osvdb.org/26686
http://aps.toshiba-tro.de/bluetooth/pages/driverinfo.php?txt=sp2
http://attrition.org/pipermail/vim/2006-October/001085.html
http://briankrebswatch.blogspot.com/2006/10/more-on-toshiba-patches.html
http://trifinite.org/blog/archives/2006/06/update_tosiba_a.html
http://www.vupen.com/english/advisories/2006/2455 Vendor Advisory
https://exchange.xforce.ibmcloud.com/vulnerabilities/27228
http://www.securityfocus.com/archive/1/437811/100/0/threaded
Sources
Source Name Source URL
NIST https://nvd.nist.gov/vuln/detail/CVE-2006-3146
MITRE https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2006-3146
History
Created Old Value New Value Data Type Notes
2022-05-10 18:07:07 Added to TrackCVE