« Volver al listado

CVE-2004-0775

Estado: ModificadaAlta (7.5)—

Buffer overflow in WIDCOMM Bluetooth Connectivity Software, as used in products such as BTStackServer 1.3.2.7 and 1.4.2.10, Windows XP and Windows 98 with MSI Bluetooth Dongles, and HP IPAQ 5450 running WinCE 3.0, allows remote attackers to execute arbitrary code via certain service requests.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (2)

Widcomm — Bluetooth Communication SoftwareWidcomm — Btstackserver

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2004-0775",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 7.5,
          "accessVector": "NETWORK",
          "vectorString": "AV:N/AC:L/Au:N/C:P/I:P/A:P",
          "authentication": "NONE",
          "integrityImpact": "PARTIAL",
          "accessComplexity": "LOW",
          "availabilityImpact": "PARTIAL",
          "confidentialityImpact": "PARTIAL"
        },
        "acInsufInfo": false,
        "impactScore": 6.4,
        "baseSeverity": "HIGH",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 10,
        "obtainUserPrivilege": true,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": false
      }
    ]
  },
  "affected": [
    {
      "source": "cve@mitre.org",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2004-10-20T04:00:00.000",
  "references": [
    {
      "url": "http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0029.html",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=109223783402624&w=2",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.internetnews.com/security/article.php/3394181",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.pentest.co.uk/documents/ptl-2004-03.html",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "cve@mitre.org"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/418633/100/0/threaded",
      "source": "cve@mitre.org"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16953",
      "source": "cve@mitre.org"
    },
    {
      "url": "http://archives.neohapsis.com/archives/vulnwatch/2004-q3/0029.html",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://marc.info/?l=bugtraq&m=109223783402624&w=2",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.internetnews.com/security/article.php/3394181",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.pentest.co.uk/documents/ptl-2004-03.html",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://www.securityfocus.com/archive/1/418633/100/0/threaded",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/16953",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "NVD-CWE-Other"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Buffer overflow in WIDCOMM Bluetooth Connectivity Software, as used in products such as BTStackServer 1.3.2.7 and 1.4.2.10, Windows XP and Windows 98 with MSI Bluetooth Dongles, and HP IPAQ 5450 running WinCE 3.0, allows remote attackers to execute arbitrary code via certain service requests."
    },
    {
      "lang": "es",
      "value": "Desbordamiento de búfer en WIDCOMM Bluetooth Connectivity Software, usado en productos como BTStackServer 1.3.2.7 y 1.4.2.10, Windows XP y Windows 98 con mochilas Bluetooth MSI, y  HP IPAQ 5450 con WinCE 3.0, permite a atacantes remotos ejecutar código de su elección mediante ciertas peticiones de servicio."
    }
  ],
  "lastModified": "2026-06-16T22:06:20.947",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:widcomm:bluetooth_communication_software:1.4.1.03:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "45325BE4-B4A6-47D0-833C-2F7D3E0130CD"
            },
            {
              "criteria": "cpe:2.3:a:widcomm:btstackserver:1.3.2.7:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "24CC0755-E558-4AC6-8BFD-55974739C16B"
            },
            {
              "criteria": "cpe:2.3:a:widcomm:btstackserver:1.4.2.10:*:*:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "90B93A7A-A1E0-417E-812E-CF2DFA106C32"
            }
          ],
          "operator": "OR"
        }
      ]
    }
  ],
  "sourceIdentifier": "cve@mitre.org"
}