Approved changes feed: RSS · Atom
cpe:2.3:h:nokia:6131_nfc:05.12:*:*:*:*:*:*:*
part: h version: 05.12 update: *
| Vendor | Nokia (817976ae-06c5-5680-b3fe-e55f44d8308a) |
|---|---|
| Product | 6131 Nfc (4e7e13f1-cb73-5c4f-b435-25afeafcf7b8) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2008-5827 |
vulnerable | 2026-06-08 04:50:53.301403 |
Details available
The Nokia 6131 Near Field Communication (NFC) phone with 05.12 firmware automatically installs software upon completing the download of a JAR file, which makes it easier for remote attackers to execute arbitrary code via a crafted URI record in an NDEF tag.
Published: 2009-01-02T19:00:00.000Z
Updated: 2024-08-07T11:04:44.694Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-5826 |
vulnerable | 2026-06-08 04:50:53.301050 |
Details available
The Nokia 6131 Near Field Communication (NFC) phone with 05.12 firmware allows remote attackers to cause a denial of service (device crash) via (1) a large value in the payload length field in an NDEF record, or a certain length for a (2) tel: or (3) sms: NDEF URI.
Published: 2009-01-02T19:00:00.000Z
Updated: 2024-08-07T11:04:44.768Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-5825 |
vulnerable | 2026-06-08 04:50:53.300587 |
Details available
The SmartPoster implementation on the Nokia 6131 Near Field Communication (NFC) phone with 05.12 firmware does not properly display the URI record when the Title record contains a certain combination of space, CR (aka \r), and . (dot) characters, which allows remote attackers to trick a user into loading an arbitrary URI via a crafted NDEF tag, as demonstrated by (1) an http: URI for a malicious web site, (2) a tel: URI for a premium-rate telephone number, and (3) an sms: URI that triggers purchase of a ringtone.
Published: 2009-01-02T19:00:00.000Z
Updated: 2024-08-07T11:04:44.699Z Reference links
|
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.