Sony PC Companion 2.1 (Load()) Stack-based Unicode Buffer Overflow

The vulnerability is caused due to a boundary error in PimData.dll when handling the value assigned to the 'File' item in the Load function and can be exploited to cause a stack-based buffer overflow via an overly long string which may lead to execution of arbitrary code on the affected machine...

Sony PC Companion 2.1 - Admin_RemoveDirectory() Unicode Stack Buffer Overflow

Sony PC Companion 2.1 - AdminRemoveDirectory Unicode Stack Buffer Overflow Sony PC Companion 2.1 AdminRemoveDirectory Stack-based Unicode Buffer Overload SEH Vendor: Sony Mobile Communications AB Product web page: http://www.sonymobile.com Affected version: 2.10.115 Production 27.1, Build 830...

Sony PC Companion 2.1 - CheckCompatibility() Unicode Stack Buffer Overflow

Sony PC Companion 2.1 - CheckCompatibility Unicode Stack Buffer Overflow Sony PC Companion 2.1 CheckCompatibility Stack-based Unicode Buffer Overload Vendor: Sony Mobile Communications AB Product web page: http://www.sonymobile.com Affected version: 2.10.115 Production 27.1, Build 830 2.10.108...

Sony PC Companion 2.1 (DownloadURLToFile()) Stack-based BOF

The vulnerability is caused due to a boundary error in WebServices.dll when handling the value assigned to the 'bstrFile' item in the DownloadURLToFile function and can be exploited to cause a stack-based buffer overflow via an overly long string which may lead to execution of arbitrary code on t...

Sony PC Companion 2.1 (Admin_RemoveDirectory()) Stack-based BOF

The vulnerability is caused due to a boundary error in PimData.dll when handling the value assigned to the 'OrgHeartBeat' item in the CheckCompatibility function and can be exploited to cause a stack-based buffer overflow via an overly long string which may lead to execution of arbitrary code on...

Sony PC Companion 2.1 - Load() Unicode Stack Buffer Overflow

Sony PC Companion 2.1 - Load Unicode Stack Buffer Overflow Sony PC Companion 2.1 Load Stack-based Unicode Buffer Overload SEH Vendor: Sony Mobile Communications AB Product web page: http://www.sonymobile.com Affected version: 2.10.115 Production 27.1, Build 830 2.10.108 Production 26.1, Build 818...

Sony PC Companion 2.1 - 'Load()' Unicode Stack Buffer Overflow

Sony PC Companion 2.1 Load Stack-based Unicode Buffer Overload SEH Vendor: Sony Mobile Communications AB Product web page: http://www.sonymobile.com Affected version: 2.10.115 Production 27.1, Build 830 2.10.108 Production 26.1, Build 818 Summary: PC Companion is a computer application that acts ...

Sony PC Companion 2.1 - 'DownloadURLToFile()' Unicode Stack Buffer Overflow

Sony PC Companion 2.1 DownloadURLToFile Stack-based Unicode Buffer Overload SEH Vendor: Sony Mobile Communications AB Product web page: http://www.sonymobile.com Affected version: 2.10.115 Production 27.1, Build 830 2.10.108 Production 26.1, Build 818 Summary: PC Companion is a computer applicati...

Sony PC Companion 2.1 WebServices.dll Unicode Buffer Overflow

Sony PC Companion 2.1 DownloadURLToFile Stack-based Unicode Buffer Overload SEH Vendor: Sony Mobile Communications AB Product web page: http://www.sonymobile.com Affected version: 2.10.115 Production 27.1, Build 830 2.10.108 Production 26.1, Build 818 Summary: PC Companion is a computer applicati...

Sony PC Companion 2.1 (Admin_RemoveDirectory()) Stack-based Unicode Buffer Overload

Summary PC Companion is a computer application that acts as a portal to Sony Xperia and operator features and applications, such as phone software updates, management of contacts and calendar, media management with Media Go, and a backup and restore feature for your phone content. Description The...

Sony PC Companion 2.1 (Load()) Stack-based Unicode Buffer Overload SEH

Summary PC Companion is a computer application that acts as a portal to Sony Xperia and operator features and applications, such as phone software updates, management of contacts and calendar, media management with Media Go, and a backup and restore feature for your phone content. Description The...

Sony PC Companion 2.1 (DownloadURLToFile()) Stack-based Unicode Buffer Overload SEH

Summary PC Companion is a computer application that acts as a portal to Sony Xperia and operator features and applications, such as phone software updates, management of contacts and calendar, media management with Media Go, and a backup and restore feature for your phone content. Description The...

CVE-2012-5003

nxapplet.jar in No Machine NX Web Companion 3.x and earlier does not properly verify the authenticity of updates, which allows user-assisted remote attackers to execute arbitrary code via a crafted 1 SiteUrl or 2 RedirectUrl parameter that points to a Trojan Horse client.zip update file...

CVE-2012-5003

nxapplet.jar in No Machine NX Web Companion 3.x and earlier does not properly verify the authenticity of updates, which allows user-assisted remote attackers to execute arbitrary code via a crafted 1 SiteUrl or 2 RedirectUrl parameter that points to a Trojan Horse client.zip update file...

CVE-2012-5003

CVE-2012-5003 concerns nxapplet.jar in No Machine NX Web Companion 3.x and earlier. The update authenticity check is insufficient, allowing a user-assisted remote attacker to execute arbitrary code via a crafted (SiteUrl) or (RedirectUrl) parameter that points to a Trojan Horse client.zip update ...

CVE-2012-5003: Improper Authentication

nxapplet.jar in No Machine NX Web Companion 3.x and earlier does not properly verify the authenticity of updates, which allows user-assisted remote attackers to execute arbitrary code via a crafted 1 SiteUrl or 2 RedirectUrl parameter that points to a Trojan Horse client.zip update file...

PT-2012-5721

Name of the Vulnerable Software and Affected Versions No Machine NX Web Companion versions 3.x and earlier Description The issue arises from the improper verification of update authenticity in nxapplet.jar, allowing user-assisted remote attackers to execute arbitrary code. This can be achieved by...

Nomachine NX Web Companion code spoofing

client.zip file is downloaded without signature check...

Audio Companion 1.5.7 DLL Hijacking Exploit

Exploit for windows platform in category local exploits =========================================== Audio Companion 1.5.7 DLL Hijacking Exploit =========================================== || || | || o,7 || . o7 || 4||| ow, : / /...

FileMaker Pro 5.0 Web Companion Software 安全问题

Web Companion 是包含在Filemaker Pro 5.0软件包中的一个程序。用来提供XML发布 功能，它并不受Filemaker Pro的web安全策略的限制。任何远程用户都可能通过XML 来访问web数据库的数据，而并不受web安全设置的影响。 Filemaker Pro 5.0也将email功能整合进了基于web的数据库应用程序中。其中的一个 功能就是可以将数据库中的内容用email发送出去。这将允许远程用户将数据库数据发送 到任意email地址，而不管web安全设置。攻击者也可以利用这一特性发送匿名邮件。 FileMaker FileMaker Pro 5.0 -...