Microsoft Windows Mobile 5.0
Approved changes feed: RSS · Atom
cpe:2.3:o:microsoft:windows_mobile:5.0:*:*:*:*:*:*:*
part: o version: 5.0 update: *
| Vendor | Microsoft (67206627-3ef6-5870-9d98-26a9f2e7065c) |
|---|---|
| Product | Windows Mobile (b0e568a5-dc15-529f-84ad-0b30e1ff566d) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2009-0244 |
vulnerable | 2026-06-08 04:51:08.500698 |
Details available
Directory traversal vulnerability in the OBEX FTP Service in the Microsoft Bluetooth stack in Windows Mobile 6 Professional, and probably Windows Mobile 5.0 for Pocket PC and 5.0 for Pocket PC Phone Edition, allows remote authenticated users to list arbitrary directories, and create or read arbitrary files, via a .. (dot dot) in a pathname. NOTE: this can be leveraged for code execution by writing to a Startup folder.
Published: 2009-01-21T20:00:00.000Z
Updated: 2024-08-07T04:24:18.392Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-5460 |
vulnerable | 2026-06-08 04:50:06.073657 |
Details available
Microsoft ActiveSync 4.1, as used in Windows Mobile 5.0, uses weak encryption (XOR obfuscation with a fixed key) when sending the user's PIN/Password over the USB connection from the host to the device, which might make it easier for attackers to decode a PIN/Password obtained by (1) sniffing or (2) spoofing the docking process.
Published: 2007-10-15T22:00:00.000Z
Updated: 2024-08-07T15:31:58.826Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-3362 |
not_vulnerable | 2026-06-08 04:49:53.772212 |
Details available
ageet AGEphone before 1.6.2, running on Windows Mobile 5 on the HTC HyTN Pocket PC device, allows remote attackers to (1) cause a denial of service (call disruption and device hang) via a SIP message with a malformed header and (2) cause a denial of service (call disruption, false ring indication, and device outage) via a SIP message with a malformed SDP delimiter.
Published: 2007-06-22T18:00:00.000Z
Updated: 2024-08-07T14:14:12.999Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-0878 |
vulnerable | 2026-06-08 04:49:33.622969 |
Details available
Unspecified vulnerability in Microsoft Internet Explorer on Windows Mobile 5.0 allows remote attackers to cause a denial of service (loss of browser and other device functionality) via a malformed WML page, related to an "overflow state." NOTE: it is possible that this issue is related to CVE-2007-0685.
Published: 2007-02-12T20:00:00.000Z
Updated: 2024-08-07T12:34:21.199Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-0685 |
vulnerable | 2026-06-08 04:49:33.076099 |
Details available
Internet Explorer on Windows Mobile 5.0 and Windows Mobile 2003 and 2003SE for Smartphones and PocketPC allows attackers to cause a denial of service (application crash and device instability) via unspecified vectors, possibly related to a buffer overflow.
Published: 2007-02-03T01:00:00.000Z
Updated: 2024-08-07T12:26:54.299Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2007-0674 |
vulnerable | 2026-06-08 04:49:33.056372 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.