Palm WebOS 1.0/1.1 'LunaSysMgr' Service Denial of Service Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/36659/info Palm WebOS is prone to a remote denial-of-service vulnerability because it fails to properly validate user-supplied data. Attackers can leverage this issue to cause an affected device to reboot. Given the natur...

Palm Pre WebOS <= 1.1 - Remote File Access Vulnerability

No description provided by source. I. Description The Palm Pre WebOS =1.1 suffers from a JavaScript injection attack that allows a malicious attacker to access any file on the mobile device. Palm has patched this vulnerability and all users are recommended to upgrade to WebOS version 1.2+. Palm...

Palm WebOS 1.0/1.1 Email Arbitrary Script Injection Vulnerability

No description provided by source. source: http://www.securityfocus.com/bid/36592/info Palm WebOS is prone to an arbitrary-script-injection vulnerability because the integrated email application fails to properly sanitize user-supplied input. An attacker can exploit this issue to execute arbitrar...

HP Launches Beta Release Of Open WebOS

Months after Hewlett-Packard originally announced the open-source version of WebOS, the beta version of the platform is on its way out the door. Friday's release includes two environments for developers. The first is the desktop build, which is boasted to provide "the ideal development environmen...

CVE-2009-5097

Palm Pre WebOS 1.1 and earlier processes JavaScript in email messages, which allows remote attackers to execute arbitrary JavaScript, as demonstrated by reading PalmDatabase.db3...

CVE-2009-5098

The LunaSysMgr process in Palm Pre WebOS 1.1 and earlier, when not viewing web pages in landscape mode, allows remote attackers to cause a denial of service crash via a web page containing a long string following a refresh tag, which triggers a floating point exception...

CVE-2009-5097

Palm Pre WebOS 1.1 and earlier processes JavaScript in email messages, which allows remote attackers to execute arbitrary JavaScript, as demonstrated by reading PalmDatabase.db3...

Code injection

Palm Pre WebOS 1.1 and earlier processes JavaScript in email messages, which allows remote attackers to execute arbitrary JavaScript, as demonstrated by reading PalmDatabase.db3...

CVE-2009-5098

The LunaSysMgr process in Palm Pre WebOS 1.1 and earlier, when not viewing web pages in landscape mode, allows remote attackers to cause a denial of service crash via a web page containing a long string following a refresh tag, which triggers a floating point exception...

Code injection

The LunaSysMgr process in Palm Pre WebOS 1.1 and earlier, when not viewing web pages in landscape mode, allows remote attackers to cause a denial of service crash via a web page containing a long string following a refresh tag, which triggers a floating point exception...

CVE-2009-5097

Technical details (affected software versions, root cause, exploitation status, and fixes) are not provided in the connected documents; monitor for updates.

CVE-2009-5097

Palm Pre WebOS 1.1 and earlier processes JavaScript in email messages, which allows remote attackers to execute arbitrary JavaScript, as demonstrated by reading PalmDatabase.db3...

CVE-2009-5098

The LunaSysMgr process in Palm Pre WebOS 1.1 and earlier, when not viewing web pages in landscape mode, allows remote attackers to cause a denial of service crash via a web page containing a long string following a refresh tag, which triggers a floating point exception...

CVE-2009-5098

The CVE-2009-5098 issue affects Palm Pre WebOS 1.1 and earlier, specifically the LunaSysMgr process. A web page containing a long string after a refresh tag can trigger a floating point exception when the device is not in landscape mode, allowing remote attackers to cause a denial of service (cra...

CVE-2009-5098: Undefined Security Weakness

The LunaSysMgr process in Palm Pre WebOS 1.1 and earlier, when not viewing web pages in landscape mode, allows remote attackers to cause a denial of service crash via a web page containing a long string following a refresh tag, which triggers a floating point exception...

PT-2011-1346

Name of the Vulnerable Software and Affected Versions Palm Pre WebOS versions 1.1 and earlier Description The issue allows remote attackers to execute arbitrary JavaScript in email messages. This is demonstrated by the ability to read PalmDatabase.db3. Recommendations For Palm Pre WebOS versions...

PT-2011-1347

Name of the Vulnerable Software and Affected Versions Palm Pre WebOS versions 1.1 and earlier Description The issue allows remote attackers to cause a denial of service, resulting in a crash, by exploiting a weakness in the LunaSysMgr process. This occurs when a web page containing a long string...

CVE-2009-5097: Improper Control of Generation of Code

Palm Pre WebOS 1.1 and earlier processes JavaScript in email messages, which allows remote attackers to execute arbitrary JavaScript, as demonstrated by reading PalmDatabase.db3...

HP Palm WebOS crossite scripting

Crossite scripting in Contacts and Calendar applications...

[security bulletin] HPSBGN02696 SSRT100590 rev.1 - HP webOS Calendar Application, Remote Execution of Arbitrary Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02945437 Version: 1 HPSBGN02696 SSRT100590 rev.1 - HP webOS Calendar Application, Remote Execution of Arbitrary Code NOTICE: The information in this Security Bulletin should be acted upon as soon...