SunnComm MediaMax privilege elevation vulnerability

Overview SunnComm MediaMax contains a privilege elevation vulnerability, which may allow a user with limited rights to execute code with elevated privileges. Description SunnComm MediaMax SunnComm MediaMax is copy protection software that is automatically installed by some audio CDs. Sony BMG has...

Sony in their CD inside the used rootkit techniques to hide files-the vulnerability warning-the black bar safety net

sony use driver Aries. sys to hide any with$sys$at the beginning of the file,directory,registry,and even the process. The real surprise comes when he finds that it was installed there by an audio CD he bought from Amazon. The CD he had was published by Sony, who licensed this "content protection...

Multiple bluetooth devices and applications DoS (Sony Ericsson, Nokia, etc)

Multiple vulnerabilities discovered with Bluetooth Stack Smasher utility...

Buffer overflow

Buffer overflow in Sony Ericsson K600i, V600i, W800i, and T68i cell phone allows remote attackers to cause a denial of service reboot or shutdown through a wireless Bluetooth connection via a malformed Logical Link Control and Adaptation Protocol L2CAP packet whose length field is less than the...

CVE-2006-0671

Buffer overflow in Sony Ericsson K600i, V600i, W800i, and T68i cell phone allows remote attackers to cause a denial of service reboot or shutdown through a wireless Bluetooth connection via a malformed Logical Link Control and Adaptation Protocol L2CAP packet whose length field is less than the...

CVE-2006-0671

The vulnerability CVE-2006-0671 affects Sony Ericsson mobile models K600i, V600i, W800i, and T68i. A buffer overflow in the Bluetooth L2CAP handling allows remote attackers to trigger a denial of service (reboot or shutdown) by sending a malformed L2CAP packet whose length field is shorter than t...

CVE-2006-0671

Buffer overflow in Sony Ericsson K600i, V600i, W800i, and T68i cell phone allows remote attackers to cause a denial of service reboot or shutdown through a wireless Bluetooth connection via a malformed Logical Link Control and Adaptation Protocol L2CAP packet whose length field is less than the...

CVE-2006-0671: Undefined Security Weakness

Buffer overflow in Sony Ericsson K600i, V600i, W800i, and T68i cell phone allows remote attackers to cause a denial of service reboot or shutdown through a wireless Bluetooth connection via a malformed Logical Link Control and Adaptation Protocol L2CAP packet whose length field is less than the...

Sony/Ericsson Bluetooth (Reset Display) Denial of Service Exploit

Exploit for hardware platform in category dos / poc ================================================================= Sony/Ericsson Bluetooth Reset Display Denial of Service Exploit ================================================================= / Sony/Ericsson reset display - PoC / / Pierre...

[ Secuobs - Advisory ] Bluetooth : DoS on Sony/Ericsson cell phones

Software affected Bluetooth Stack on Sony/Ericsson cell phones Version Sony/Ericsson K600i, V600i, W800i, T68i and certainly other models Impact Bluetooth Stack Denial of Service may be more - may be a rootkit : - Phone DoS reboot or shutdown - White screen bug freeze sleeping Credits Pierre...

Sony/Ericsson Bluetooth - Reset Display Denial of Service

/ Sony/Ericsson reset display - PoC / / Pierre BETOUIN - [email protected] / / 05-02-2006 / / Vulnerability found using BSS fuzzer : / / Download www.secuobs.com/news/05022006-bluetooth10.shml / / / / Causes anormal behaviours on some Sony/Ericsson / / cell phones / / Vulnerable tested...

Sony/Ericsson Bluetooth (Reset Display) Denial of Service Exploit

No description provided by source. / Sony/Ericsson reset display - PoC / / Pierre BETOUIN - [email protected] / / 05-02-2006 / / Vulnerability found using BSS fuzzer : / / Download www.secuobs.com/news/05022006-bluetooth10.shml / / / / Causes anormal behaviours on some Sony/Ericsson / /...

[Full-disclosure] Replay Attack Vulnerability on Sonys Instant Video Everywhere Service

Replay Attack Vulnerability on Sonys Instant Video Everywhere Service http://www.iptel.org/security/2005-12-31.html December 31, 2005 I. Background Sony offers a SIP based voice and video service called IVE. By downloading a client application for the Windows operating system everybody can make...

Sony Instant Video Everywhere replay attacl cryptography problem

Password is encrypted without using challenge. It makes it possible to replay authentication again...

AxWebRemoveCtrl ActiveX Control Arbitrary Code Execution

The remote host contains an ActiveX control from SunnComm called AxWebRemoveCtrl. This control was likely installed by requesting an uninstaller for SunnComm's MediaMax digital rights management software used, for example, on select Sony CDs. By design, AxWebRemoveCtrl allows any website to cause...

CVE-2005-4069

SunnComm MediaMax DRM 5.0.21.0, as used by Sony BMG, assigns insecure Everyone/Full Control permissions to the "SunnComm Shared" directory, which allows local users to gain privileges by modifying programs installed in that directory, such as MMX.exe...

CVE-2005-4069

CVE-2005-4069 concerns SunnComm MediaMax DRM 5.0.21.0, used by Sony BMG, which is installed with insecure permissions on the file path "\Program Files\Common Files\SunnComm Shared". The installer grants Everyone full control to the MediaMax directory, enabling a local user to replace or modify bi...

CVE-2005-3650

The CodeSupport.ocx ActiveX control, as used by Sony to uninstall the First4Internet XCP DRM, has "safe for scripting" enabled, which allows remote attackers to execute arbitrary code by calling vulnerable functions such as RebootMachine, IsAdministrator, and ExecuteCode...

CVE-2005-3650

The CodeSupport.ocx ActiveX control, as used by Sony to uninstall the First4Internet XCP DRM, has "safe for scripting" enabled, which allows remote attackers to execute arbitrary code by calling vulnerable functions such as RebootMachine, IsAdministrator, and ExecuteCode...

CVE-2005-3650

The CVE-2005-3650 entry concerns the CodeSupport.ocx ActiveX control used by Sony to uninstall First4Internet XCP DRM. The vulnerability arises because the control’s “safe for scripting” setting enables remote attackers to call vulnerable methods (e.g., RebootMachine, IsAdministrator, ExecuteCode...