Buffer Overflow Vulnerability in Motorola PEBL U6 and Other P2K-Based Phones

CVE-2006-1366

Summary

A buffer overflow vulnerability exists in the Motorola PEBL U6 and possibly other Motorola P2K-based smartphones. This flaw can be exploited by remote attackers through a specially crafted OBEX setpath command directed at the OBEX File Transfer service on Bluetooth channel 9. Due to this vulnerability, attackers could induce a denial of service, causing the device to shut down unexpectedly, and in certain scenarios, they may also manage to execute arbitrary code on the affected devices.

References