• info
• discussion
• exploit
• solution
• references

WIDCOMM Bluetooth Communication Software Directory Traversal Vulnerability

The WIDCOMM Bluetooth communications software is prone to a directory traversal vulnerability. This issue is due to a failure of the application to properly sanitize user-supplied input data prior to utilizing it.

Attackers may exploit this vulnerability to gain access to potentially sensitive files, as well as corrupt or destroy data. Other attacks may also be possible.

WIDCOMM BTStackServer for Microsoft Windows version 1.4.2 is reported to be affected by this vulnerability. Other versions are also likely affected.