Windows Mobile

Vendor:

First CVE: Dec 31, 2006 · Active for 19 years

14

Total CVEs

More Total CVEs than 91% of tracked products

2.8

Avg CVEs / Year

Higher CVE frequency than 75% of tracked products

6.2

Avg CVSS

Higher Avg CVSS than 25% of tracked products

0.0%

KEV Rate

Bottom 1%

Trends Over Time

The number and severity of CVEs published that impact Windows Mobile over time

Volume of CVEsAvg CVSS Base Score

First CVE

Dec 31, 2006

19 years ago

Most Recent CVE

Jun 2, 2011

5,531 days ago

CVE Severity & Scoring

Windows Mobile14 CVEs

14%

29%

57%

All CVEs352,231 CVEs

45%

40%

11%

LowMediumHigh

Attack Vector

Local0 (0.0%)

Network1 (7.1%)

Unknown12 (85.7%)

Physical1 (7.1%)

Adjacent Network0 (0.0%)

Attack Complexity

Low2 (14.3%)

High0 (0.0%)

Unknown12 (85.7%)

User Interaction

None2 (14.3%)

Unknown12 (85.7%)

Required0 (0.0%)

Privileges Required

Low1 (7.1%)

High0 (0.0%)

None1 (7.1%)

Unknown12 (85.7%)

Top CVEs

Signals from CVEs in this product scope (14 CVEs).

14 CVEs · Highest risk first

CVE	Published	CVSS	Risk	KEV	Exploit
CVE-2011-2039HIGH The helper application in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.3.185 on Windows, and on Windows Mobile, downloads a client executable f	Jun 2, 2011	7.6	80	NO	YES
CVE-2006-6908HIGH Buffer overflow in the Bluetooth Stack COM Server in the Widcomm Bluetooth stack, as packaged as Widcomm Stack 3.x and earlier on Windows, Widcomm BTStackServer 1.4.2.10 and 1.3.2.	Dec 31, 2006	10.0	39	NO	NO
CVE-2008-4295MEDIUM Microsoft Windows Mobile 6.0 on HTC Wiza 200 and HTC MDA 8125 devices does not properly handle the first attempt to establish a Bluetooth connection to a peer with a long name, whi	Sep 27, 2008	5.4	38	NO	YES
CVE-2009-0244HIGH Directory traversal vulnerability in the OBEX FTP Service in the Microsoft Bluetooth stack in Windows Mobile 6 Professional, and probably Windows Mobile 5.0 for Pocket PC and 5.0 f	Jan 21, 2009	8.8	36	NO	NO
CVE-2007-0878HIGH Unspecified vulnerability in Microsoft Internet Explorer on Windows Mobile 5.0 allows remote attackers to cause a denial of service (loss of browser and other device functionality)	Feb 12, 2007	7.8	28	NO	NO
CVE-2007-0674HIGH Pictures and Videos on Windows Mobile 5.0 and Windows Mobile 2003 and 2003SE for Smartphones and PocketPC allows user-assisted remote attackers to cause a denial of service (device	Feb 3, 2007	7.1	24	NO	NO
CVE-2011-2041HIGH The Start Before Logon (SBL) functionality in Cisco AnyConnect Secure Mobility Client (formerly AnyConnect VPN Client) before 2.3.254 on Windows, and on Windows Mobile, allows loca	Jun 2, 2011	7.2	22	NO	NO
CVE-2007-3362HIGH ageet AGEphone before 1.6.2, running on Windows Mobile 5 on the HTC HyTN Pocket PC device, allows remote attackers to (1) cause a denial of service (call disruption and device hang	Jun 22, 2007	7.8	22	NO	NO
CVE-2007-3351HIGH The SJPhone SIP soft phone 1.60.303c, when installed on the Dell Axim X3 running Windows Mobile 2003, allows remote attackers to cause a denial of service (device hang and traffic	Jun 22, 2007	7.8	20	NO	NO
CVE-2007-5493MEDIUM The SMS handler for Windows Mobile 2005 Pocket PC Phone edition allows attackers to hide the sender field of an SMS message via a malformed WAP PUSH message that causes the PDU to	Oct 18, 2007	4.3	15	NO	NO

View all 14 CVEs →

Exploit Exposure

Signals from CVEs in this product scope (14 CVEs).

CISA KEV

0 CVEs

0.0% of CVEs· Bottom 1%

Metasploit

1 CVE

7.1% of CVEs· 97th percentile

Nuclei

0 CVEs

0.0% of CVEs· Bottom 1%

ExploitDB

2 CVEs

14.3% of CVEs· 89th percentile

Social Chatter

Signals from CVEs in this product scope (14 CVEs).

Media Mentions

Signals from CVEs in this product scope (14 CVEs).

Top CNAs Publishing CVEs For Windows Mobile

Top CWEs

Versions

Version	CVE Count	Avg CVSS	Avg EPSS	Exploits
6.0	3	6.8	24.6%	1
5.0	5	6.9	19.2%	0
2005	1	4.3	4.2%	0
2003_se	2	4.8	10.7%	0
2003	2	4.8	10.7%	0