Login Request a demo
Unscored severity · published Jun 22, 2006
CVE-2006-3146
The TOSRFBD.SYS driver for Toshiba Bluetooth Stack 4.00.29 and earlier on Windows allows remote attackers to cause a denial of service (reboot) via a L2CAP echo request that…
–
CVSS
2.5%
EPSS
No
On KEV
Description
The TOSRFBD.SYS driver for Toshiba Bluetooth Stack 4.00.29 and earlier on Windows allows remote attackers to cause a denial of service (reboot) via a L2CAP echo request that triggers an out-of-bounds memory access, similar to "Ping o' Death" and as demonstrated by BlueSmack. NOTE: this issue was originally reported for 4.00.23.
Exploitation
Is it being used?
Exploit prediction (EPSS)2.5% · higher than 85% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
BS
Bluetooth Stack · Toshiba
through 4.00.29; 3.00.11; 3.00.12; 3.00.31a; 3.00.32; 3.01.03; +8 more · source: NVD
Affected product
BS
Bluetooth Stack
Toshiba
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2006-3146
CVE.org
https://www.cve.org/CVERecord?id=CVE-2006-3146
aps.toshiba-tro.de
http://aps.toshiba-tro.de/bluetooth/pages/driverinfo.php?txt=sp2
attrition.org
http://attrition.org/pipermail/vim/2006-October/001085.html
briankrebswatch.blogspot.com
http://briankrebswatch.blogspot.com/2006/10/more-on-toshiba-patches.html
Patch
http://secunia.com/advisories/20657
securitytracker.com
http://securitytracker.com/id?1016345
trifinite.org
http://trifinite.org/blog/archives/2006/06/update_tosiba_a.html
More from Bluetooth Stack
–
CVE-2015-0884
Unquoted Windows search path vulnerability in Toshiba Bluetooth Stack for Windows before 9.10.32(T) and Service Station before 2.2.14 allows local users to gain privileges via a…
–
CVE-2006-5611
Unspecified vulnerability in Toshiba Bluetooth Stack before 4.20.01 has unspecified impact and attack vectors, related to the 4.20.01(T) "Security fix." NOTE: due to the lack of…
–
CVE-2006-0212
Directory traversal vulnerability in OBEX Push services in Toshiba Bluetooth Stack 4.00.23(T) and earlier allows remote attackers to upload arbitrary files to arbitrary remote…