CVE-2008-5825

The SmartPoster implementation on the Nokia 6131 Near Field Communication (NFC) phone with 05.12 firmware does not properly display the URI record when the…

published January 2, 2009

CVSS
—
EPSS
2%
Percentile
75.9
In the wild
Unconfirmed
What it is

The SmartPoster implementation on the Nokia 6131 Near Field Communication (NFC) phone with 05.12 firmware does not properly display the URI record when the Title record contains a certain combination of space, CR (aka \r), and . (dot) characters, which allows remote attackers to trick a user into loading an arbitrary URI via a crafted NDEF tag, as demonstrated by (1) an http: URI for a malicious web site, (2) a tel: URI for a premium-rate telephone number, and (3) an sms: URI that triggers purchase of a ringtone.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01622 · 75.9th percentile
Published
2009-01-02T19:00Z
EPSS history
Timeline
  • 02 JAN 19:00Z
    The SmartPoster implementation on the Nokia 6131 Near Field Communication (NFC) phone with 05.12 firmware does not properly display the URI record when the…
    cvelistv5