CVE-2007-0859 describes a vulnerability in Palm OS Treo smartphones where the "Find" feature remains accessible even when the device is password-locked. This allows an attacker with physical access to extract sensitive information from memory via text searches or paste operations using specific keyboard shortcuts. The vulnerability has a low severity CVSS score (AV:L/AC:L/Au:N/C:P/I:N/A:N), indicating local access and low attack complexity are required for a partial confidentiality impact. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion, though it received limited media coverage.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
650CPE matchmatch criteria | cpe:2.3:h:palm:treo:650:*:*:*:*:*:*:* | ||
680CPE matchmatch criteria | cpe:2.3:h:palm:treo:680:*:*:*:*:*:*:* | ||
700pCPE matchmatch criteria | cpe:2.3:h:palm:treo:700p:*:*:*:*:*:*:* |
CVSS version used by this source: 2.0
AV:L/AC:L/Au:N/C:P/I:N/A:N
No social media mentions found for this CVE.
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.6 GitHub mentions.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.