LG MRA58K - Out-of-Bounds Heap Read in CAVIFileParser::Destroy Resulting in Invalid Free

LG MRA58K - Out-of-Bounds Heap Read in CAVIFileParser::Destroy Resulting in Invalid Free Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1221 Similar to the previously reported issue 1206 , when parsing AVI files the CAVIFileParser object contains a fixed-size array of what...

LG MRA58K - 'ASFParser::ParseHeaderExtensionObjects' Missing Bounds-Checking

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1222 There is a memcpy in ASFParser::ParseHeaderExtensionObjects which doesn't check that the size of the copy is smaller than the size of the source buffer, resulting in an out-of-bounds heap read. The vulnerable code appears to b...

LG MRA58K - Out-of-Bounds Heap Read in CAVIFileParser::Destroy Resulting in Invalid Free

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1221 Similar to the previously reported issue 1206 , when parsing AVI files the CAVIFileParser object contains a fixed-size array of what appears to be pointer/length pairs, used I suppose to store the data for each stream. This is...

LG G4 MRA58K - liblg_parser_mkv.so Bad Allocation Calls Exploit

Exploit for Android platform in category dos / poc Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1102 In both of the following functions mkvparser::AudioTrack::AudioTrackmkvparser::Segment, mkvparser::Track::Info const&, long long, long long...

LG G4 MRA58K - liblg_parser_mkv.so Bad Allocation Calls

LG G4 MRA58K - liblgparsermkv.so Bad Allocation Calls Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1102 In both of the following functions mkvparser::AudioTrack::AudioTrackmkvparser::Segment, mkvparser::Track::Info const&, long long, long long...

LG G4 MRA58K - 'liblg_parser_mkv.so' Bad Allocation Calls

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1102 In both of the following functions mkvparser::AudioTrack::AudioTrackmkvparser::Segment, mkvparser::Track::Info const&, long long, long long mkvparser::VideoTrack::VideoTrackmkvparser::Segment, mkvparser::Track::Info const&, lo...

LG G4 MRA58K - 'mkvparser::Block::Block' Heap Buffer Overflow

Source: https://bugs.chromium.org/p/project-zero/issues/detail?id=1124 There are multiple paths in mkvparser::Block::Block... that result in heap buffer overflows. See attached for sample files that trigger the overflow conditions - these will not reliably crash the process, since the overflows a...

CVE-2014-3929

The default configuration for Cougar-LG stores sensitive information under the web root with insufficient access control, which might allow remote attackers to obtain private ssh keys...

CVE-2014-3930

lg.pl in Cistron-LG 1.01 stores sensitive information under the web root with insufficient access controls, which allows remote attackers to obtain IP addresses and other unspecified router credentials...

Improper access control

lg.pl in Cistron-LG 1.01 stores sensitive information under the web root with insufficient access controls, which allows remote attackers to obtain IP addresses and other unspecified router credentials...

CVE-2014-3928

Cougar-LG stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain credentials...

CVE-2014-3928

CVE-2014-3928 affects Cougar-LG web applications (Perl-based looking-glass/router-portal) where sensitive credentials are stored under the web root with insufficient access control. This allows remote attackers to obtain credentials. NVD lists CVSS v3.0 base score 9.8 (CRITICAL) with AV:N/AC:L/PR...

CVE-2014-3930

CVE-2014-3930 concerns lg.pl in Cistron-LG 1.01, where sensitive information is stored under the web root with insufficient access controls. The issue enables remote attackers to obtain IP addresses and other router credentials. The vulnerability is described consistently across sources (NVD/CNVD...

CVE-2014-3930

lg.pl in Cistron-LG 1.01 stores sensitive information under the web root with insufficient access controls, which allows remote attackers to obtain IP addresses and other unspecified router credentials...

CVE-2014-3929

The default configuration for Cougar-LG stores sensitive information under the web root with insufficient access control, which might allow remote attackers to obtain private ssh keys...

CVE-2014-3928

Cougar-LG stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain credentials...

CVE-2014-3929

The CVE-2014-3929 entry concerns Cougar-LG, a Perl-based set of web applications for router access. Affected component: default configuration that stores sensitive information under the web root with insufficient access control. Root cause: insecure/default file placement allows web-access to pri...

CVE-2014-3930: Improper Access Control

lg.pl in Cistron-LG 1.01 stores sensitive information under the web root with insufficient access controls, which allows remote attackers to obtain IP addresses and other unspecified router credentials...

CVE-2014-3929: Improper Access Control

The default configuration for Cougar-LG stores sensitive information under the web root with insufficient access control, which might allow remote attackers to obtain private ssh keys...

CVE-2014-3928: Improper Access Control

Cougar-LG stores sensitive information under the web root with insufficient access control, which allows remote attackers to obtain credentials...