A vulnerability has been reported in Toshiba Bluetooth Stack, which can be exploited by malicious people to cause a DoS (Denial of Service) and potentially compromise a vulnerable system.

The vulnerability is caused due to an unspecified memory corruption error and may potentially allow execution of arbitrary code via specially crafted Bluetooth packets.

Successful exploitation requires knowledge of the Bluetooth device address.

The vulnerability is reported in version 3.x and versions 4 through 4.00.35. Other versions may also be affected.

NOTE: Products from other vendors using the Toshiba Bluetooth Stack may also be affected. The Toshiba Bluetooth Stack running on 64-bit platforms is reportedly not affected.

Solution
Update to the latest version.

Provided and/or discovered by
David Maynor, SecureWorks and Jon Ellch.

Changelog
Further details available in Customer Area

Original Advisory
http://www.secureworks.com/press/20061011-dell.html

Deep Links
Links available in Customer Area