CanSecWest Pwn2Own Hacker Contest Targets Smartphones

The organizers of this year’s CanSecWest Pwn2Own have painted a big bulls-eye on mobile devices, offering up an whopping $60,000 in prizes to entice hackers to exploit vulnerabilities on iPhones, Android, Nokia and BlackBerry smartphones. At Pwn2Own 2010, which takes place in Vancouver on March 2...

Nokia Symbian OS 3rd Edition - Multiple Web Browser Vulnerabilities

Nokia Symbian OS 3rd Edition - Multiple Web Browser Vulnerabilities My name is Nishant Das Patnaik, an independent security researcher from India. I have discovered multiple vulnerabilities in the Web Browser of the high end smartphones manufactured by Nokia running Symbian OS 3rd Edition. The...

Nokia Symbian OS 3rd Edition - Multiple Web Browser Vulnerabilities

My name is Nishant Das Patnaik, an independent security researcher from India. I have discovered multiple vulnerabilities in the Web Browser of the high end smartphones manufactured by Nokia running Symbian OS 3rd Edition. The detailed vulnerability disclosures along with tested PoCs have been...

Nokia Symbian S60v3 web browser DoS Exploits

Exploit for unknown platform in category dos / poc ============================================ Nokia Symbian S60v3 web browser DoS Exploits ============================================ This archive has six denial of service exploits that affect the Nokia Symbian S60v3 web browser. Exploits:...

Multiple Web Browser Vulnerabilities in Nokia Symbian OS 3rd Edition

Exploit for unknown platform in category dos / poc ==================================================================== Multiple Web Browser Vulnerabilities in Nokia Symbian OS 3rd Edition ==================================================================== My name is Nishant Das Patnaik, an...

Nokia Application Installer 6.81.13.0 DLL Hijacking Exploit

Exploit for windows platform in category local exploits =========================================================== Nokia Application Installer 6.81.13.0 DLL Hijacking Exploit ===========================================================...

iPhone, Android, Others Get Man in the Middle Treatment

Security researchers have released a paper detailing successful man-in-the-middle attacks against several smartphones. The SSL enabled log in sessions on the tested, Nokia N95, HTC Tilt, Android G1 and iPhone 3GS devices was sniffed using the publicly available SSLstrip tool, with the attack taki...

Mandrake Security Advisory MDVSA-2009:225 (qt4)

The remote host is missing an update to qt4 announced via advisory MDVSA-2009:225. OpenVAS Vulnerability Test $Id: mdksa2009225.nasl 6573 2017-07-06 13:10:50Z cfischer $ Description: Auto-generated from advisory MDVSA-2009:225 qt4 Authors: Thomas Reinke Copyright: Copyright c 2009 E-Soft Inc...

[ MDVSA-2009:225 ] qt4

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2009:225 http://www.mandriva.com/security/ Package : qt4 Date : September 8, 2009 Affected: 2009.0, 2009.1, Enterprise Server 5.0 Problem Description: A vulnerability has been found and corrected in qt4:...

Nokia Trolltech Qt4 SSL certificate spoofing

certificate spoofing with 0 symbol in domain name...

Design/Logic Flaw

src/network/ssl/qsslcertificate.cpp in Nokia Trolltech Qt 4.x does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a...

CVE-2009-2700

src/network/ssl/qsslcertificate.cpp in Nokia Trolltech Qt 4.x does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a...

CVE-2009-2700

src/network/ssl/qsslcertificate.cpp in Nokia Trolltech Qt 4.x does not properly handle a '\0' character in a domain name in the Subject Alternative Name field of an X.509 certificate, which allows man-in-the-middle attackers to spoof arbitrary SSL servers via a crafted certificate issued by a...

CVE-2009-2700

Technical details for CVE-2009-2700 are not publicly available in the provided connected documents. The initial description notes a SAN '\�' issue in Qt 4.x, but no accompanying connected item supplies vendor, product, affected versions, impact, or remediation steps beyond that. Monitor for offic...

Nokia MultiMedia Player 1.1 - Remote Denial of Service

Nokia MultiMedia Player 1.1 - Remote Denial of Service source: https://www.securityfocus.com/bid/36215/info Nokia Multimedia Player is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause the affected application to stop responding, denying service to...

Nokia MultiMedia Player 1.1 - Remote Denial of Service

source: https://www.securityfocus.com/bid/36215/info Nokia Multimedia Player is prone to a remote denial-of-service vulnerability. An attacker can exploit this issue to cause the affected application to stop responding, denying service to legitimate users. This issue affects Nokia Multimedia Play...

Nokia Multimedia Player 1.1 Stack Overflow

=========================================================== Nokia Multimedia Player 1.1 .npl Local Stack Overflow POC =========================================================== 1-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=-=0 0 1 1 /' \ /'\ /\ \ /'\ 0 0 /, \ /\/\ \ \ \ ...

Nokia Lotus Notes Connector - 'lnresobject.dll' Remote Denial of Service

source: https://www.securityfocus.com/bid/36144/info The Nokia Lotus Notes Connector 'lnresobject.dll' ActiveX control is prone to a remote denial-of-service vulnerability because of an unspecified error. A successful attack allows a remote attacker to crash an application that is using the Activ...

Nokia Lotus Notes Connector - lnresobject.dll Remote Denial of Service

Nokia Lotus Notes Connector - lnresobject.dll Remote Denial of Service source: https://www.securityfocus.com/bid/36144/info The Nokia Lotus Notes Connector 'lnresobject.dll' ActiveX control is prone to a remote denial-of-service vulnerability because of an unspecified error. A successful attack...

CVE-2009-2538

The Nokia N95 running Symbian OS 9.2, N82, and N810 Internet Tablet allow remote attackers to cause a denial of service memory consumption via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692...