CVE-2014-9991

CVE-2014-9991 describes a buffer overflow in Qualcomm closed-source Android components when USB mass storage transfers exceed 16kB. Public sources (CNVD-2018-08826, NVD entry) tie this issue to Android devices using Qualcomm Snapdragon/mobile platforms (e.g., MDM9206/9625/9635M/etc., SD series) a...

Solaris 10 (x86) : 123403-01

SunOS 5.10x86: usbms patch. Date this patch was last updated by Sun : Jan/30/08 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text in this plugin was extracted from the Oracle SunOS Patch Updates. include'deprecatednasllevel.inc'; include'compat.inc'; if description...

P4wnP1: A Open Source USB Attack Platform

PenTestIT RSS Feed As of now, hardware security projects seem to be attracting me more than software based projects. Evidently, I wrote a few posts covering them - List of Portable Hardware Devices for Penetration Testing, List of Raspberry Pi DIY Projects for Anonymity, etc. among other awesome...

CVE-2016-0133

The USB Mass Storage Class driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows physically proximate attackers to execute arbitrary code by inserting a crafted US...

Privilege escalation

The USB Mass Storage Class driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows physically proximate attackers to execute arbitrary code by inserting a crafted US...

CVE-2016-0133

The USB Mass Storage Class driver in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows physically proximate attackers to execute arbitrary code by inserting a crafted US...

CVE-2016-0133

CVE-2016-0133 concerns a kernel-elevation vulnerability in the USB Mass Storage Class driver used by Windows variants (Vista SP2, Server 2008 SP2/R2, 7 SP1, 8.1, 2012, RT 8.1, 10). The root cause is improper validation of objects in memory within the USB Mass Storage driver, allowing a physically...

Microsoft USB Mass Storage Class Driver Privilege Elevation Vulnerability (3143142)

This host is missing an important security update according to Microsoft Bulletin MS16-033 SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...

MS16-033: Security Update for Windows USB Mass Storage Class Driver to Address Elevation of Privilege (3143142)

The remote Windows host is missing a security update. It is, therefore, affected by a flaw in the Windows USB Mass Storage Class driver due to improper validation of objects in memory. A local attacker can exploit this, via a specially crafted USB device, to elevate privileges, allowing the...

Cumulative Update for Windows 10: March 8, 2016

None None...

Microsoft Windows USB Mass Storage CVE-2016-0133 Local Privilege Escalation Vulnerability

Description Microsoft Windows is prone to a local privilege-escalation vulnerability. A local attacker can exploit this issue to execute arbitrary code with kernel-level privileges. Successful exploits will result in the complete compromise of affected computers. Technologies Affected Microsoft...

Cumulative update for Windows 10 Version 1511 and Windows Server 2016 Technical Preview 4: March 8, 2016

None None...

Firefox OS < 2.2 Multiple Vulnerabilities

Binary data 8878.prm...

CVE-2015-5960

Mozilla Firefox OS before 2.2 is affected. A vulnerability allows a physically proximate attacker to bypass the device pass-code and access USB Mass Storage (UMS) media volumes by performing a mount operation via the USB interface. Impact is local and requires proximity; no remote vector is descr...

UMS (USB) mounting after reboot even without unlocking — Mozilla

Clement Lefevre reported a bug in USB Mass Storage handling of Firefox OS that would allow unauthorized access to device data through the USB interface. The logic error would under certain circumstances expose USB media volumes to USB hosts while the device is locked with a pass code, for example...

Travis Goodspeed - Prototyping Active Disk Antiforensics

Document Title: =============== Travis Goodspeed - Prototyping Active Disk Antiforensics References: =========== View: http://www.youtube.com/watch?v=qZtkANvDxZA Release Date: ============= 2013-01-04 Vulnerability Laboratory ID VL-ID: ==================================== 818 Common Vulnerability...

Travis Goodspeed - Prototyping Active Disk Antiforensics

Document Title: =============== Travis Goodspeed - Prototyping Active Disk Antiforensics References: =========== View: http://www.youtube.com/watch?v=qZtkANvDxZA Release Date: ============= 2013-01-04 Vulnerability Laboratory ID VL-ID: ==================================== 818 Common Vulnerability...