CVE-2008-4295
Last modified
CVE-2008-4295 is a vulnerability of currently unknown severity. Microsoft Windows Mobile 6.0 on HTC Wiza 200 and HTC MDA 8125 devices does not properly handle the first attempt to establish a Bluetooth connection to a peer with a long name, which allows remote attackers to cause a denial of service (device reboot) by configuring a Bluetooth device with a long hci name and (1) connecting directly to the Windows Mobile system or (2) waiting for the Windows Mobile system to scan for nearby devices.. EPSS estimates a 30.14% chance of exploitation in the next 30 days.
Description
Microsoft Windows Mobile 6.0 on HTC Wiza 200 and HTC MDA 8125 devices does not properly handle the first attempt to establish a Bluetooth connection to a peer with a long name, which allows remote attackers to cause a denial of service (device reboot) by configuring a Bluetooth device with a long hci name and (1) connecting directly to the Windows Mobile system or (2) waiting for the Windows Mobile system to scan for nearby devices.
Metrics
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Microsoft | Windows Mobile | 6.0 |
References
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2008-4295?
How severe is CVE-2008-4295?
How do I fix CVE-2008-4295?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2008
- CVE-2008-4283CRLF injection vulnerability in the WebContainer component i…
- CVE-2008-4284Open redirect vulnerability in the ibm_security_logout servl…
- CVE-2008-4285Unspecified vulnerability in the Performance Monitoring Infr…
- CVE-2008-4292Opera before 9.52 does not check the CRL override upon encou…
- CVE-2008-4293Unspecified vulnerability in Opera before 9.52 on Windows, w…
- CVE-2008-4294IBM Tivoli Netcool/Webtop 2.1 before 2.1.0.5 preserves cache…
- CVE-2008-4296The Cisco Linksys WRT350N with firmware 1.0.3.7 has "admin" …
- CVE-2008-4297Mercurial before 1.0.2 does not enforce the allowpull permis…
- CVE-2008-4298Memory leak in the http_request_parse function in request.c …
- CVE-2008-4299A certain ActiveX control in the Microsoft Internet Authenti…
- CVE-2008-4300A certain ActiveX control in adsiis.dll in Microsoft Interne…
- CVE-2008-4301A certain ActiveX control in iisext.dll in Microsoft Interne…
Are you affected by CVE-2008-4295?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST