HTC Touch - vCard over IP Denial of Service

!/usr/bin/env python Copyright c 2009 Mobile Security Lab www.mseclab.com Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files the "Software", to deal in the Software without restriction, including without limitation the...

HTC Touch vCard over IP Denial of Service Exploit

Exploit for hardware platform in category dos / poc ================================================= HTC Touch vCard over IP Denial of Service Exploit ================================================= ! /usr/bin/env python Copyright c 2009 Mobile Security Lab www.mseclab.com Permission is hereby...

HTC Touch - vCard over IP Denial of Service

HTC Touch - vCard over IP Denial of Service ! /usr/bin/env python Copyright c 2009 Mobile Security Lab www.mseclab.com Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files the "Software", to deal in the Software without...

HTC Touch vCard over IP Denial of Service PoC Code

Hello, PoC code for testing the MSL-2008-002 vulnerability HTC Touch vCard over IP Denial of Service is now available at: http://poc.mseclab.com/pocs/MSL-2008-002-PoC.py The code provide means for demonstrating the HTC Touch vCard over IP DoS by sending vCards to port UDP/9204 of the target IP...

HTC Touch vCard over IP Denial of Service PoC Code

No description provided by source. ! /usr/bin/env python Copyright c 2009 Mobile Security Lab www.mseclab.com Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files the "Software", to deal in the Software without restrictio...

Code injection

ImageIO in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 allow remote attackers to cause a denial of service memory consumption and device reset via a crafted TIFF image...

Design/Logic Flaw

The Passcode Lock feature in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 displays SMS messages when the emergency-call screen is visible, which allows physically proximate attackers to obtain sensitive information by reading these messages. NOTE: this might be a...

CVE-2008-4227

Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 changes the encryption level of PPTP VPN connections to a lower level than was previously used, which makes it easier for remote attackers to obtain sensitive information or hijack a connection by decrypting network...

Race condition

Race condition in the Passcode Lock feature in Apple iPhone OS 2.0 through 2.1 and iPhone OS for iPod touch 2.0 through 2.1 allows physically proximate attackers to remove the lock and launch arbitrary applications by restoring the device from a backup...

Memory corruption

Safari in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 does not properly handle HTML TABLE elements, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted HTML document...

Design/Logic Flaw

Safari in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 does not isolate the call-approval dialog from the process of launching new applications, which allows remote attackers to make arbitrary phone calls via a crafted HTML document...

Design/Logic Flaw

Safari in Apple iPhone OS 2.0 through 2.1 and iPhone OS for iPod touch 2.1 through 2.1 does not restrict an IFRAME's content display to the boundaries of the IFRAME, which allows remote attackers to spoof a user interface via a crafted HTML document...

CVE-2008-1586

ImageIO in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 allow remote attackers to cause a denial of service memory consumption and device reset via a crafted TIFF image...

CVE-2008-4228

The CVE-2008-4228 issue affects Apple iPhone OS versions 1.0–2.1 and iPhone OS for iPod touch 1.1–2.1. A design/logic flaw in the Passcode Lock feature lets physically proximate attackers exploit the device’s Emergency Call ability to place a call to an arbitrary number while the device is locked...

CVE-2008-4230

The CVE-2008-4230 family describes a vulnerability in Apple iPhone OS 1.0–2.1 and iPhone OS for iPod touch 1.1–2.1 where the Passcode Lock allows SMS content to be visible while the emergency-call screen is shown. The underlying issue is the display of SMS messages on the device screen when the e...

CVE-2008-4227

Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 changes the encryption level of PPTP VPN connections to a lower level than was previously used, which makes it easier for remote attackers to obtain sensitive information or hijack a connection by decrypting network...

CVE-2008-4232

Safari in Apple iPhone OS 2.0 through 2.1 and iPhone OS for iPod touch 2.1 through 2.1 does not restrict an IFRAME's content display to the boundaries of the IFRAME, which allows remote attackers to spoof a user interface via a crafted HTML document...

CVE-2008-4227

Apple iPhone OS 1.0–2.1 and iPhone OS for iPod touch 1.1–2.1 change the PPTP VPN encryption level to a lower one, making it easier for remote attackers to decrypt traffic or hijack connections. Affected software: Apple iPhone OS 1.0–2.1 and iPod touch OS 1.1–2.1. Root cause: reduction in PPTP enc...

CVE-2008-1586

The CVE-2008-1586 issue affects ImageIO in Apple iPhone OS 1.0–2.1 and iPhone OS for iPod touch 1.1–2.1, where remote attackers can trigger denial of service via a crafted TIFF image. The core risk is memory consumption leading to a device reset. Connected sources also reference libtiff-related a...

CVE-2008-4232

Safari in Apple iPhone OS 2.0–2.1 and iPhone OS for iPod touch 2.1 suffer an IFRAME boundary enforcement flaw: an IFRAME can display content beyond its boundaries, enabling remote UI spoofing via crafted HTML. The affected components are Safari on iPhone OS 2.x and iPod touch OS 2.x; root cause i...