171 matches found
Adobe Flash Player AVM newFrameState Integer Overfow Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Flash Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the AVM...
Flash Player vulnerabilities of the new use of the method-vulnerability warning-the black bar safety net
Source: Phantom maillist Two days before the recommended Mark Dowd's Paper “Exploiting Flash Reliably” Learn a little, very good very powerful. For later Flash Player exploits has opened up a new new road. Simple to say, from Flash9 to start, to achieve an ActionScript Virtual Machine AVM, the...
Code injection
AVM Fritz!Box 7050, and possibly other product models, allows remote attackers to cause a denial of service VoIP application crash via a zero-length UDP packet to the SIP port port 5060...
CVE-2007-0431
AVM Fritz!Box 7050, and possibly other product models, allows remote attackers to cause a denial of service VoIP application crash via a zero-length UDP packet to the SIP port port 5060...
CVE-2007-0431
AVM Fritz!Box 7050, and possibly other product models, allows remote attackers to cause a denial of service VoIP application crash via a zero-length UDP packet to the SIP port port 5060...
CVE-2007-0431
CVE-2007-0431 affects AVM FRITZ!Box devices (e.g., Fritz!Box 7050) with a VoIP/SIP service. The vulnerability is triggered by sending a zero-length UDP packet to the SIP port (5060), which can cause a denial-of-service (VoIP application crash). Connected sources (NVD/OpenVAS) confirm the affected...
CVE-2007-0431: Undefined Security Weakness
AVM Fritz!Box 7050, and possibly other product models, allows remote attackers to cause a denial of service VoIP application crash via a zero-length UDP packet to the SIP port port 5060...
AVM FRITZ!Box VoIP远程拒绝服务漏洞
FRITZ！Box是AVM公司开发出的无线连接电脑与音响、电视的盒子，可以通过无线局域网连接将电脑里的所有数字内容传输到高档音响设备和大型等离子电视上。 FRITZ！Box在处理某些UDP报文时存在漏洞，远程攻击者可能利用此漏洞对设备执行拒绝服务攻击。 如果向Fritz!Box的5060 （SIP）端口发送了0长度的UDP报文的话，就会导致VoIP电话应用程序崩溃。 AVM Fritz!Box 7050 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...
AVM IGD CTRL Service directory traversal
HTTP directory traversal with TCP/49001 UPNP port...
[Full-disclosure] Flaw in AVM UPNP service for windows
Description The "AVM IGD CTRL Service", a Universal Plug and Play UPNP service for windows, which is part of the software package "Fritz!DSL Software 02.02.29" provides the possibility to read any file on the windows system partition for any user - no matter how much restricted rights the user...
DoS against AVM Fritz!Box 7050 (and others)
Denial of Service against AVM Fritz!Box 7050 and others Discovered by: Matthias Wenzel Advisory: http://mazzoo.de/blog/2007/01/18FritzBoxDoS Manufacturer: AVM www.avm.de Product: Fritz!Box 750 and others Vendor was notified 6 month ago see blog entry by Matthias Sending a zero-length UDP packet t...
avm-traversal.txt
Description The "AVM IGD CTRL Service", a Universal Plug and Play UPNP service for windows, which is part of the software package "Fritz!DSL Software 02.02.29" provides the possibility to read any file on the windows system partition for any user - no matter how much restricted rights the user...
AVM Fritz!Box VoIP router DoS
Crash on empty UDP packet to UDP/5060 SIP port...
Directory traversal
Directory traversal vulnerability in the AVM IGD CTRL Service in Fritz!DSL 02.02.29 allows remote attackers to read arbitrary files via ..%5C URL-encoded dot dot backslash sequences in a URI requested from the AR7 webserver...
CVE-2007-0357
Directory traversal vulnerability in the AVM IGD CTRL Service in Fritz!DSL 02.02.29 allows remote attackers to read arbitrary files via ..%5C URL-encoded dot dot backslash sequences in a URI requested from the AR7 webserver...
CVE-2007-0357
CVE-2007-0357 is a directory traversal vulnerability in the AVM IGD CTRL Service of Fritz!DSL 02.02.29. The issue allows remote attackers to read arbitrary files via URL-encoded dot-dot backslash sequences (..%5C) in a URI requested from the AR7 webserver. Affected component is the AVM IGD CTRL S...
CVE-2007-0357: Undefined Security Weakness
Directory traversal vulnerability in the AVM IGD CTRL Service in Fritz!DSL 02.02.29 allows remote attackers to read arbitrary files via ..%5C URL-encoded dot dot backslash sequences in a URI requested from the AR7 webserver...
avm fritz!dsl igd control service 2.2.29 - Directory Traversal Information Disclosure
source: https://www.securityfocus.com/bid/22093/info The AVM Fritz!DSL IGD Control Service is prone to a remote information-disclosure vulnerability because the application fails to properly sanitize user-supplied input. Exploiting this issue allows remote, unauthenticated attackers to retrieve t...
avm fritz!dsl igd control service 2.2.29 - Directory Traversal Information Disclosure
avm fritz!dsl igd control service 2.2.29 - Directory Traversal Information Disclosure source: https://www.securityfocus.com/bid/22093/info The AVM Fritz!DSL IGD Control Service is prone to a remote information-disclosure vulnerability because the application fails to properly sanitize user-suppli...