CVE-2006-6908
Buffer overflow in the Bluetooth Stack COM Server in the Widcomm Bluetooth stack, as packaged as Widcomm Stack 3.x and earlier on Windows, Widcomm BTStackServer 1.4.2.10 and 1.3.2.7 on Windows, Widcomm Bluetooth Communication Software 1.4.1.03 on Windows, and the Bluetooth implementation in Windows Mobile or Windows CE on the HP IPAQ 2215 and 5450, allows remote attackers to cause a denial of service (service crash) and possibly execute arbitrary code via unspecified vectors.
Key facts
- CVSS score
- 10.0 (v2.0)
- Severity
- HIGH
- CVSS vector
AV:N/AC:L/Au:N/C:C/I:C/A:C- EPSS score
- 30.7% (98th percentile)
- In CISA KEV
- No
- In EU EUVD
- Yes (EUVD-2006-6891)
- Published
- December 31, 2006
- NVD last modified
- June 16, 2026
- Status
- Modified
EU Vulnerability Database (EUVD)
This vulnerability is also tracked by ENISA as EUVD-2006-6891 in the EU Vulnerability Database. Last updated in EUVD on August 7, 2024.
View on the EU Vulnerability DatabaseAffected products
- broadcom / widcomm bluetooth
- broadcom / widcomm bluetooth
- broadcom / widcomm bluetooth
- broadcom / widcomm bluetooth
- microsoft / windows embedded compact
- microsoft / windows mobile
Certified products that may be affected
6 FIPS 140 or Common Criteria certified products, from automated matching by sec-certs.org.
- Windows 8.1 with Surface 3 and Windows Phone 8.1 with Lumia 635 and Lumia 830 - Microsoft Corporation - Common Criteria CCEVS-VR-10635-2015 - archived
- Microsoft Windows Mobile 6.5 - Microsoft Corporation - Common Criteria Certificate Number: 2010/65 - archived
- Microsoft Windows Mobile 6.1 - Microsoft Corporation - Common Criteria Certificate Number: 2009/57 - archived
- Microsoft Windows Mobile 6.1 - Microsoft Corporation - Common Criteria Certificate Number: 2008/48 - archived
- Windows Mobile 6 - Microsoft Corporation - Common Criteria Certificate Number: 2008/44 - archived
See all 6 in the Security Certifications Explorer.
References
Last updated September 17, 2026 · Source: NVD, CISA KEV, FIRST.org EPSS
Query CVEs from your AI assistant
The CVE/NVD Explorer brain answers CVE questions directly inside Claude, ChatGPT, or any MCP assistant — always up to date, no setup. Add it once and stop pasting advisories into chat.
Add the CVE brain