EUVD-2014-9090

Malware in sbrugna...

EUVD-2014-9091

Malware in sbrugna...

EUVD-2015-7932

Malware in sbrugna...

EUVD-2015-7933

Malware in sbrugna...

Samsung SmartViewer STWAxConfigNVR Memory Corruption (CVE-2015-8039)

A memory corruption vulnerability exists in Samsung SmartViewer. The vulnerability is due to untrusted pointer dereference. A remote attacker may exploit this vulnerability by enticing a victim to visit a maliciously crafted page...

Samsung SmartViewer STWAxConfig Memory Corruption (CVE-2015-8039)

A memory corruption vulnerability exists in Samsung SmartViewer. The vulnerability is due to untrusted pointer dereference. A remote attacker may exploit this vulnerability by enticing a victim to visit a maliciously crafted page...

Samsung SmartViewer CNC_Ctrl ActiveX Control Out of Bounds Indexing (CVE-2015-8040)

A remote code execution vulnerability exists in Samsung SmartViewer. The vulnerability is due to improper validation of the index parameter provided to the rtspgetdlsendtime method of the CNCCtrl ActiveX Control. A remote, unauthenticated attacker can exploit this vulnerability by enticing the...

Samsung SmartViewer Arbitrary Code Execution Vulnerability (CNVD-2015-07353)

Samsung SmartViewer is a hard disk recorder DVR monitoring software from Samsung. An arbitrary code execution vulnerability exists in Samsung SmartViewer. It allows remote attackers to execute arbitrary code via indexed values...

Samsung SmartViewer Arbitrary Code Execution Vulnerability (CNVD-2015-07352)

Samsung SmartViewer is a hard disk recorder DVR monitoring software from Samsung. An arbitrary code execution vulnerability exists in Samsung SmartViewer. It allows remote attackers to execute arbitrary code by triggering an untrusted pointer reference in the DVRSetupSave method of the STWAxConfi...

CVE-2015-8040

The rtspgetdlsendtime method in the CNCCtrl control in Samsung SmartViewer allows remote attackers to execute arbitrary code via an index value...

CVE-2015-8039

Samsung SmartViewer allows remote attackers to execute arbitrary code via unspecified vectors to the 1 DVRSetupSave method in the STWAxConfig control or 2 SendCustomPacket method in the STWAxConfigNVR control, which trigger an untrusted pointer dereference...

Design/Logic Flaw

The rtspgetdlsendtime method in the CNCCtrl control in Samsung SmartViewer allows remote attackers to execute arbitrary code via an index value...

Null pointer dereference

Samsung SmartViewer allows remote attackers to execute arbitrary code via unspecified vectors to the 1 DVRSetupSave method in the STWAxConfig control or 2 SendCustomPacket method in the STWAxConfigNVR control, which trigger an untrusted pointer dereference...

CVE-2015-8039

Samsung SmartViewer allows remote attackers to execute arbitrary code via unspecified vectors to the 1 DVRSetupSave method in the STWAxConfig control or 2 SendCustomPacket method in the STWAxConfigNVR control, which trigger an untrusted pointer dereference...

CVE-2015-8040

The rtspgetdlsendtime method in the CNCCtrl control in Samsung SmartViewer allows remote attackers to execute arbitrary code via an index value...

CVE-2015-8039

Samsung SmartViewer is affected by CVE-2015-8039 via untrusted pointer dereference in two components: the DVRSetupSave method of STWAxConfig and the SendCustomPacket method of STWAxConfigNVR. Connected advisories (ZDI-15-462, ZDI-15-463) describe remote code execution with attacker-supplied memor...

Samsung SmartViewer 'DVRSetupSave' Method Remote Code Execution Vulnerability

Samsung SmartViewer is a suite of video viewing software designed for video surveillance systems. An unspecified security vulnerability exists in Samsung SmartViewer that could be exploited by remote attackers to conduct a denial-of-service attack and crash the application...

Samsung SmartViewer Remote Code Execution Vulnerability

Samsung SmartViewer is a suite of video viewing software designed for video surveillance systems. The software supports viewing live video over the Internet, as well as searching for video from cameras connected through a Samsung DVR or NVR. A remote code execution vulnerability exists in Samsung...

(0Day) Samsung SmartViewer CNC_Ctrl ActiveX Control rtsp_getdlsendtime Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Samsung SmartViewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the handling...

(0Day) Samsung SmartViewer STWAxConfig DVRSetupSave Untrusted Pointer Dereference Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Samsung SmartViewer. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...