CVE-2007-0859

Severity: low (CVSS 2.1 v2.0)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2007-02-16 · updated 2026-06-16

Description

The Find feature in Palm OS Treo smart phones operates despite the system password lock, which allows attackers with physical access to obtain sensitive information (memory contents) by doing (1) text searches or (2) paste operations after pressing certain keyboard shortcut keys.

Affected products

Palm Treo: 650, 680, 700p

References

http://discussion.treocentral.com/showthread.php?p=1199445&posted=1#post1199445
http://osvdb.org/33724
http://securityreason.com/securityalert/2260
http://www.securityfocus.com/archive/1/460059/100/0/threaded
http://www.securityfocus.com/archive/1/460328/100/0/threaded
http://www.securityfocus.com/archive/1/460901/100/0/threaded
http://www.securityfocus.com/archive/1/460908/100/0/threaded
http://www.securityfocus.com/archive/1/460911/100/0/threaded
http://www.securityfocus.com/archive/1/460954/100/0/threaded
http://www.securityfocus.com/bid/22468
http://www.symantec.com/enterprise/research/SYMSA-2007-002.txt
https://exchange.xforce.ibmcloud.com/vulnerabilities/32502

Get alerted when CVE-2007-0859 or the next vulnerability affects your stack