Nokia n95 vulnerabilities

2 CVEs affecting Nokia n95, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2009-0649, published 2009-02-20.

More from Nokia.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2009-0649, published 2009-02-20. High severity, CVSS 7.8. EPSS: 8.3% chance of exploitation in the next 30 days. The web browser in Symbian OS on the Nokia N95 cell phone allows remote attackers to cause a denial of service (crash) via JavaScript code that calls the setAttributeNode method.
• CVE-2007-6371, published 2007-12-15. High severity, CVSS 7.1. EPSS: 1.5% chance of exploitation in the next 30 days. Nokia N95 cell phone with RM-159 12.0.013 firmware allows remote attackers to cause a denial of service (device inoperability) via a SIP INVITE message accompanied by an immediately subsequent SIP…