CVE-2006-3146
The TOSRFBD.SYS driver for Toshiba Bluetooth Stack 4.00.29 and earlier on Windows allows remote...
The TOSRFBD.SYS driver for Toshiba Bluetooth Stack 4.00.29 and earlier on Windows allows remote attackers to cause a denial of service (reboot) via a L2CAP echo request that triggers an out-of-bounds memory access, similar to "Ping o' Death" and as demonstrated by BlueSmack. NOTE: this issue was originally reported for 4.00.23.
Exploit likelihood
What each source reports
NVD Score used
The TOSRFBD.SYS driver for Toshiba Bluetooth Stack 4.00.29 and earlier on Windows allows remote attackers to cause a denial of service (reboot) via a L2CAP echo request that triggers an out-of-bounds memory access, similar to "Ping o' Death" and as demonstrated by BlueSmack. NOTE: this issue was originally reported for 4.00.23.
- Record
CVE-2006-3146- CVSS 2.0
- 5.0 Medium
AV:N/AC:L/Au:N/C:N/I:N/A:P - Weakness
- CWE-119
- Updated
- 2026-11-02
CVE List No score
The TOSRFBD.SYS driver for Toshiba Bluetooth Stack 4.00.29 and earlier on Windows allows remote attackers to cause a denial of service (reboot) via a L2CAP echo request that triggers an out-of-bounds memory access, similar to "Ping o' Death" and as demonstrated by BlueSmack. NOTE: this issue was originally reported for 4.00.23.
- Record
CVE-2006-3146- Updated
- 2026-11-02
EUVDEUVD-2006-3143 No score
The TOSRFBD.SYS driver for Toshiba Bluetooth Stack 4.00.29 and earlier on Windows allows remote attackers to cause a denial of service (reboot) via a L2CAP echo request that triggers an out-of-bounds memory access, similar to "Ping o' Death" and as demonstrated by BlueSmack. NOTE: this issue was originally reported for 4.00.23.
- Record
EUVD-2006-3143- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-pgpr-c8rx-9p5p No score
The TOSRFBD.SYS driver for Toshiba Bluetooth Stack 4.00.29 and earlier on Windows allows remote...
The TOSRFBD.SYS driver for Toshiba Bluetooth Stack 4.00.29 and earlier on Windows allows remote attackers to cause a denial of service (reboot) via a L2CAP echo request that triggers an out-of-bounds memory access, similar to "Ping o' Death" and as demonstrated by BlueSmack. NOTE: this issue was originally reported for 4.00.23.
- Record
GHSA-pgpr-c8rx-9p5p- Weakness
- CWE-119
- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2006-3146 is a medium vulnerability (CVSS 5.0) in Toshiba Bluetooth Stack, published June 22, 2006. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 2.51%, the 84th percentile. No source names a fixed version.
References
vupen.com/english/advisories/2006/2455
attrition.org/pipermail/vim/2006-October/001085.html
exchange.xforce.ibmcloud.com/vulnerabilities/27228
briankrebswatch.blogspot.com/2006/10/more-on-toshiba-patches.html
secunia.com/advisories/20657
securitytracker.com/id?1016345
Show 8 moreShow less
trifinite.org/trifinite_advisory_toshiba.html
securityfocus.com/archive/1/437811/100/0/threaded
osvdb.org/26686
aps.toshiba-tro.de/bluetooth/pages/driverinfo.php?txt=sp2
nvd.nist.gov/vuln/detail/CVE-2006-3146
github.com/advisories/GHSA-pgpr-c8rx-9p5p