CVE-2012-4222

drivers/gpu/msm/kgsl.c in the Qualcomm Innovation Center QuIC Graphics KGSL kernel-mode driver for Android 2.3 through 4.2 allows attackers to cause a denial of service NULL pointer dereference via an application that uses crafted arguments in a local kgslioctl call...

CVE-2012-4220

CVE-2012-4220 / CVE-2012-4221 affect the Qualcomm DIAG kernel-mode driver for Android 2.3–4.2. diagchar_core.c (CVE-2012-4220) and diagchar_core.c with an untrusted pointer dereference (CVE-2012-4221) allow a local application to exploit crafted arguments via diagchar_ioctl to execute arbitrary c...

SAP NetWeaver Dispatcher - DiagTraceR3Info Buffer Overflow (Metasploit)

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'SAP NetWeaver Dispatcher...

SAP NetWeaver Dispatcher DiagTraceR3Info Buffer Overflow

This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit web site for more information on licensing and terms of use. http://metasploit.com/ require 'msf/core' class Metasploit3 'SAP NetWeaver Dispatcher...

CVE-2012-2511

The DiagTraceAtoms function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remote attackers to cause a denial of service daemon crash via a crafted SAP Diag packet...

Design/Logic Flaw

The DiagTraceAtoms function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remote attackers to cause a denial of service daemon crash via a crafted SAP Diag packet...

CVE-2012-2513

The Diaginput function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remote attackers to cause a denial of service daemon crash via a crafted SAP Diag packet...

CVE-2012-2611

CVE-2012-2611 affects SAP NetWeaver Dispatcher where the DiagTraceR3Info function in disp+work.exe can overflow a stack buffer when Developer Traces are enabled at level 2 or higher, enabling remote code execution via crafted SAP Diag packets. Affected: SAP NetWeaver Dispatcher (7.0 EHP1/EHP2) wi...

PT-2012-4070

Name of the Vulnerable Software and Affected Versions SAP NetWeaver versions 7.0 EHP1 and 7.0 EHP2 Description The issue allows remote attackers to cause a denial of service, resulting in a daemon crash, by sending a crafted SAP Diag packet to the DiagTraceAtoms function in disp+work.exe...

PT-2012-4072

Name of the Vulnerable Software and Affected Versions SAP NetWeaver versions 7.0 EHP1 and 7.0 EHP2 Description The issue allows remote attackers to cause a denial of service, resulting in a daemon crash, via a crafted SAP Diag packet. This is due to a problem in the Diaginput function in...

CVE-2012-2612: Improper Restriction of Operations within the Bounds of a Memory Buffer

The DiagTraceHex function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remote attackers to cause a denial of service daemon crash via a crafted SAP Diag packet...

CVE-2012-2511: Improper Restriction of Operations within the Bounds of a Memory Buffer

The DiagTraceAtoms function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remote attackers to cause a denial of service daemon crash via a crafted SAP Diag packet...

PT-2012-4071

Name of the Vulnerable Software and Affected Versions SAP NetWeaver versions 7.0 EHP1 and 7.0 EHP2 Description The issue allows remote attackers to cause a denial of service, resulting in a daemon crash, via a crafted SAP Diag packet. This is due to a problem in the DiagTraceStreamI function in...

PT-2012-4073

Name of the Vulnerable Software and Affected Versions SAP NetWeaver versions 7.0 EHP1 and 7.0 EHP2 Description The issue allows remote attackers to cause a denial of service, resulting in a daemon crash, by sending a crafted SAP Diag packet to the DiagiEventSource function in disp+work.exe...

PT-2012-4135

Name of the Vulnerable Software and Affected Versions SAP NetWeaver versions 7.0 EHP1 and 7.0 EHP2 Description The issue allows remote attackers to cause a denial of service, resulting in a daemon crash, by sending a crafted SAP Diag packet to the DiagTraceHex function in disp+work.exe...

CVE-2012-2611: Improper Input Validation

The DiagTraceR3Info function in the Dialog processor in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2, when a certain Developer Trace configuration is enabled, allows remote attackers to execute arbitrary code via a crafted SAP Diag packe...

PT-2012-4134

Name of the Vulnerable Software and Affected Versions SAP NetWeaver versions 7.0 EHP1 and 7.0 EHP2 Description The issue allows remote attackers to execute arbitrary code via a crafted SAP Diag packet when a certain Developer Trace configuration is enabled in the DiagTraceR3Info function...

CVE-2012-2512: Improper Restriction of Operations within the Bounds of a Memory Buffer

The DiagTraceStreamI function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remote attackers to cause a denial of service daemon crash via a crafted SAP Diag packet...

CORE-2012-0123 - SAP Netweaver Dispatcher Multiple Vulnerabilities

Core Security - Corelabs Advisory http://corelabs.coresecurity.com/ SAP Netweaver Dispatcher Multiple Vulnerabilities 1. Advisory Information Title: SAP Netweaver Dispatcher Multiple Vulnerabilities Advisory ID: CORE-2012-0123 Advisory URL:...

SAP NetWeaver Dispatcher DiagTraceR3Info Buffer Overflow

This module exploits a stack buffer overflow in the SAP NetWeaver Dispatcher service. The overflow occurs in the DiagTraceR3Info function and allows a remote attacker to execute arbitrary code by supplying a special crafted Diag packet. The Dispatcher service is only vulnerable if the Developer...