PatchTheCVECVE-2007-0859: The Find feature in Palm OS Treo smart phones operates despite the system password lock, which allows attacker
CVE-2007-0859 is a low-severity flaw (CVSS 2.1) affecting treo. Below: why it ranks where it does, which versions are affected, what to do, and the exact commands.
The Find feature in Palm OS Treo smart phones operates despite the system password lock, which allows attackers with physical access to obtain sensitive information (memory contents) by doing (1) text searches or (2) paste operations after pressing certain keyboard shortcut keys.
Why this priority
- Public exploit reference
No fix is published yet: follow the downgrade or mitigation steps.
Risk facts
| CVSS score | 2.1 (Low) |
| EPSS exploit chance | 0.5% (top 56%) |
| CISA exploited list | No |
| Published | 2007-02-16 |
| Last modified | 2026-06-16 |
Last updated 2026-06-16 · Sources: CVE Program, NVD, CISA KEV, EPSS and vendor advisories · How we score
Am I affected?
Timeline
- Published CVE record published
- Updated Record last modified
Scores and fixes here are computed automatically from those and other public sources. Confirm with the vendor advisory before changing production systems.
Quick answers
How do I fix CVE-2007-0859?
treo: mitigate or apply the listed mitigation. Exact commands for each OS are on this page.
Is CVE-2007-0859 being exploited?
CVE-2007-0859 is not on the CISA Known Exploited Vulnerabilities list at the time of the last update. Check again, as this can change.
What does CVE-2007-0859 affect?
CVE-2007-0859 affects treo. Severity is low (CVSS 2.1). The Find feature in Palm OS Treo smart phones operates despite the system password lock, which allows attackers with physical access to obtain sensitive information (memory contents) by doing (1) text searches or (2) paste operations after
How urgent is CVE-2007-0859?
Priority 23/100. Public exploit reference