CVE-2014-7664: Undefined Security Weakness

The Bilingual Magic Ball Relajo aka com.wBilingualMagicBallRelajo application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-8163

Name of the Vulnerable Software and Affected Versions Magicam Photo Magic Editor version 5.0 Description The issue concerns the Magicam Photo Magic Editor application, which fails to verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and obtain...

CVE-2014-7652: Undefined Security Weakness

The Magicam Photo Magic Editor aka mobi.magicam.editor application 5.0 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7464

The Magic Stamp aka vn.avagame.apotatem application 2.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Information disclosure

The Bilingual Magic Ball aka com.wBilingualMagicBall application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7371

CVE-2014-7371 affects the Android app “Magic Balloonman Marty Boone” (com.app_martyboone.layout) version 1.400. The issue is that the app does not verify X.509 certificates from SSL servers, which enables man-in-the-middle attackers to spoof servers and access sensitive information via a crafted ...

CVE-2014-7446

The CVE-2014-7446 entry concerns the Android app “The Bilingual Magic Ball” (com.wBilingualMagicBall) version 0.1, where SSL connections do not verify X.509 certificates. This root cause enables man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificat...

CVE-2014-7464

CVE-2014-7464 concerns the Android app “The Magic Stamp” (aka vn.avagame.apotatem) version 2.8, where the client fails to verify X.509 certificates from SSL servers. This root cause allows MITM attackers to spoof the server and potentially leak sensitive information via a crafted certificate. The...

CVE-2014-7446

The Bilingual Magic Ball aka com.wBilingualMagicBall application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7446: Undefined Security Weakness

The Bilingual Magic Ball aka com.wBilingualMagicBall application 0.1 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

CVE-2014-7371: Undefined Security Weakness

The Magic Balloonman Marty Boone aka com.appmartyboone.layout application 1.400 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

PT-2014-8002

Name of the Vulnerable Software and Affected Versions The Bilingual Magic Ball aka com.wBilingualMagicBall application version 0.1 Description The issue concerns the application's failure to verify X.509 certificates from SSL servers. This allows man-in-the-middle attackers to spoof servers and...

PT-2014-8018

Name of the Vulnerable Software and Affected Versions The Magic Stamp aka vn.avagame.apotatem version 2.8 Description The issue allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate because the application does not verify X.509 certificates...

CVE-2014-7464: Undefined Security Weakness

The Magic Stamp aka vn.avagame.apotatem application 2.8 for Android does not verify X.509 certificates from SSL servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...

Kernel: HID: OOB write in magicmouse driver

An out-of-bounds write flaw was found in the way the Apple Magic Mouse/Trackpad multi-touch driver handled Human Interface Device HID reports with an invalid size. An attacker with physical access to the system could use this flaw to crash the system or, potentially, escalate their privileges on...

CVE-2014-3181

Multiple stack-based buffer overflows in the magicmouserawevent function in drivers/hid/hid-magicmouse.c in the Magic Mouse HID driver in the Linux kernel through 3.16.3 allow physically proximate attackers to cause a denial of service system crash or possibly execute arbitrary code via a crafted...

DEBIAN-CVE-2014-3181

Multiple stack-based buffer overflows in the magicmouserawevent function in drivers/hid/hid-magicmouse.c in the Magic Mouse HID driver in the Linux kernel through 3.16.3 allow physically proximate attackers to cause a denial of service system crash or possibly execute arbitrary code via a crafted...

Stack overflow

Multiple stack-based buffer overflows in the magicmouserawevent function in drivers/hid/hid-magicmouse.c in the Magic Mouse HID driver in the Linux kernel through 3.16.3 allow physically proximate attackers to cause a denial of service system crash or possibly execute arbitrary code via a crafted...

CVE-2014-3181

Multiple stack-based buffer overflows in the magicmouserawevent function in drivers/hid/hid-magicmouse.c in the Magic Mouse HID driver in the Linux kernel through 3.16.3 allow physically proximate attackers to cause a denial of service system crash or possibly execute arbitrary code via a crafted...

CVE-2014-3181

Multiple stack-based buffer overflows in the magicmouserawevent function in drivers/hid/hid-magicmouse.c in the Magic Mouse HID driver in the Linux kernel through 3.16.3 allow physically proximate attackers to cause a denial of service system crash or possibly execute arbitrary code via a crafted...