CVE-2012-1775: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in VideoLAN VLC media player before 2.0.1 allows remote attackers to execute arbitrary code via a crafted MMS:// stream...

VLC MMS Stream Handling Buffer Overflow

This module exploits a buffer overflow in VLC media player VLC media player prior to 2.0.0. The vulnerability is due to a dangerous use of sprintf which can result in a stack buffer overflow when handling a malicious MMS URI. This module uses the browser as attack vector. A specially crafted MMS...

vlc -- arbitrary code execution in Real RTSP and MMS support

Jean-Baptiste Kempf, on behalf of the VideoLAN project reports: If successful, a malicious third party could crash the VLC media player process. Arbitrary code execution could be possible on some systems...

CVE-2011-4863

The Tencent QQPimSecure com.tencent.qqpimsecure application 3.0.2 for Android does not properly protect data, which allows remote attackers to read or modify SMS/MMS messages and a contact list via a crafted application...

Design/Logic Flaw

The Tencent QQPimSecure com.tencent.qqpimsecure application 3.0.2 for Android does not properly protect data, which allows remote attackers to read or modify SMS/MMS messages and a contact list via a crafted application...

CVE-2011-4863

The Tencent QQPimSecure com.tencent.qqpimsecure application 3.0.2 for Android does not properly protect data, which allows remote attackers to read or modify SMS/MMS messages and a contact list via a crafted application...

CVE-2011-4863

The CVE concerns Tencent QQPimSecure (com.tencent.qqpimsecure) on Android, version 3.0.2. The flaw is a data protection weakness that allows remote attackers to read or modify SMS/MMS messages and the contact list via a crafted application. The vulnerability is described without exploit specifics...

CVE-2011-4863: Undefined Security Weakness

The Tencent QQPimSecure com.tencent.qqpimsecure application 3.0.2 for Android does not properly protect data, which allows remote attackers to read or modify SMS/MMS messages and a contact list via a crafted application...

Windows Media Player v11.0.5721.5262 Remote Denial Of Service

Exploit for windows platform in category dos / poc import socket, binascii print "\n" print "----------------------------------------------------------------" print "| WMP11 Remote Null Pointer |" print "| Level, Smash the Stack |" print "| Windows XP SP3 x86, Windows Media Player v11.0.5721.5262...

viaExtract - Forensic tool for Android devices released

viaExtract - Forensic tool for Android devices released Android Forensics is now easier, faster and more powerful than ever. viaForensics has released viaExtract – Android Logical, a powerful analysis and reporting tool for Android smart phones and devices.Expanding on our popular AFLogical...

CVE-2011-0680

data/WorkingMessage.java in the Mms application in Android before 2.2.2 and 2.3.x before 2.3.2 does not properly manage the draft cache, which allows remote attackers to read SMS messages intended for other recipients in opportunistic circumstances via a standard text messaging service...

Default configuration

data/WorkingMessage.java in the Mms application in Android before 2.2.2 and 2.3.x before 2.3.2 does not properly manage the draft cache, which allows remote attackers to read SMS messages intended for other recipients in opportunistic circumstances via a standard text messaging service...

CVE-2011-0680

The CVE affects Android’s Mms component. data/WorkingMessage.java in the Mms app on Android versions before 2.2.2 and on 2.3.x before 2.3.2 fails to properly manage the draft SMS cache, allowing remote attackers to read SMS messages intended for other recipients under certain conditions via the s...

CVE-2011-0680

data/WorkingMessage.java in the Mms application in Android before 2.2.2 and 2.3.x before 2.3.2 does not properly manage the draft cache, which allows remote attackers to read SMS messages intended for other recipients in opportunistic circumstances via a standard text messaging service...

CVE-2011-0680: Undefined Security Weakness

data/WorkingMessage.java in the Mms application in Android before 2.2.2 and 2.3.x before 2.3.2 does not properly manage the draft cache, which allows remote attackers to read SMS messages intended for other recipients in opportunistic circumstances via a standard text messaging service...

8) Your next wallet is a phone. Discuss.

Mobile payments have been going strong in countries like Japan and Finland for years now. In the U.S., however, its taken longer for mobile payments to get a hold on consumers. That’s all about to change. Late model mobile devices like Apple’s iPhone and Google Android-based phones now offer...

Windows Mobile 6.1 and 6.5 Double Free Denial of Service

No description provided by source. Vendor: Microsoft Product: Windows Mobile 6.1 and 6.5 Vulnerability: Double Free Denial of Service Tested vulnerable versions: Windows Mobile 6.1 and 6.5 Tested on : HTC Touch WM 6.1, HTC Touch2 WM 6.5 CREDITS: Celil Ünüver from SecurityArchitect.Org CONTACT:...

Microsoft Windows Mobile double free vulnerability

Double free on receiving VCF via MMS/bluetooth...

[SecurityArchitect-009]: Microsoft Windows Mobile Double Free Vulnerability

Vendor: Microsoft Product: Windows Mobile Vulnerability: Double Free Tested vulnerable versions: Windows Mobile 6.1 and 6.5 Tested on : HTC Touch WM 6.1, HTC Touch2 WM 6.5 CREDITS: Celil nver from SecurityArchitect.Org CONTACT: celilunuvern0sp4mgmail.com Vulnerability Details and Analysis: The...

Windows Mobile 6.1 and 6.5 Double Free Denial of Service

Exploit for windows platform in category dos / poc ======================================================== Windows Mobile 6.1 and 6.5 Double Free Denial of Service ======================================================== Product: Windows Mobile 6.1 and 6.5 Vulnerability: Double Free Denial of...