CVE-2010-4026

The CVE-2010-4026 issue concerns HP Palm webOS 1.4.1 where a vulnerability in the Palm webOS service API allows a local user to gain privileges by issuing privileged service calls. The exact root cause isn’t detailed in the provided documents, but HP’s Security Bulletin links CVE-2010-4026 to a c...

CVE-2010-4027

The CVE-2010-4027 issue affects HP Palm webOS 1.4.1, specifically the camera application, enabling a local user to overwrite arbitrary files on the device filesystem via unknown vectors. HP’s security bulletin (HPSBMI02582 SSRT100269 rev.1) confirms the vulnerability and assigns CVSS v2 base metr...

CVE-2010-4025

Unspecified vulnerability in Doc Viewer in HP Palm webOS 1.4.1 allows remote attackers to execute arbitrary code via a crafted document, as demonstrated by a Word document...

CVE-2010-4026

Unspecified vulnerability in the service API in HP Palm webOS 1.4.1 allows local users to gain privileges by leveraging the ability to perform certain service calls...

CVE-2010-4027

Unspecified vulnerability in the camera application in HP Palm webOS 1.4.1 allows local users to overwrite arbitrary files via unknown vectors...

CVE-2010-4025

CVE-2010-4025 affects Palm webOS 1.4.1's Doc Viewer. A crafted Word document could allow remote code execution. HP’s security bulletin HPSBMI02573 rev.1 recommends updating to webOS 1.4.5+ (or later) to mitigate; until then, avoid untrusted Word docs. The HP bulletin lists CVSS v2 base 6.8 (AV:L/...

HPSBMI02573 SSRT100227 rev.1 - Palm webOS, webOS Doc Viewer, Execution of Arbitrary Code

Potential Security Impact Execution of arbitrary code VULNERABILITY SUMMARY A potential security vulnerability has been identified with Palm webOS Doc Viewer. This vulnerability could be exploited to execute arbitrary code. RESOLUTION The vulnerability can be resolved by updating affected devices...

Palm Pwned: Researchers Hack WebOS With Text Messages

Security researchers at the Intrepidus Group have hacked into Palm’s new WebOS platform, using nothing more than text messages to exploit a slew of dangerous web app vulnerabilities. Hackers at the security consulting firm found that the WebOS SMS client did not properly validate input/output...

Palm Pre WebOS 1.1 DoS

Exploit for unknown platform in category dos / poc ====================== Palm Pre WebOS 1.1 DoS ====================== Title: Palm Pre WebOS 1.1 DoS CVE-ID: OSVDB-ID: Author: Townsend Harris Published: 2009-10-14 view source print? I. Description The Palm Pre WebOS version AAAAA..." usin...

Palm Pre WebOS 1.1 Denial Of Service

I. Description The Palm Pre WebOS version AAAAA..." using 50280 or more characters after the refresh. IV. About This vulnerability was discovered by Townsend Ladd Harris Vulnerability details will be posted at: http://tlhsecurity.blogspot.com/2009/10/palm-pre-webos-ve...

Palm WebOS 'LunaSysMgr'服务拒绝服务漏洞

Bugraq ID: 36659 Palm webOS是一款基于移动设备的WEB OS操作系统。 Palm webOS当解析特殊构建的WEB页时会触发浮点数异常，攻击者可以利用漏洞使应用程序崩溃。 当打开包含50,280字节数据的WEB页时，"LunaSysMgr"进程会崩溃，可导致电话重新启动。造成拒绝服务攻击。 Palm webOS 1.1 Palm webOS 1.0.4 Palm webOS 1.0.3 厂商解决方案: Palm WebOS 1.2已经修复此漏洞： http://palmwebos.org/ "meta http-equiv="refresh"...

Palm Pre WebOS 1.1 DoS

No description provided by source. I. Description The Palm Pre WebOS version = 1.1 suffers from a floating point exception vulnerability when attempting to view a specially crafted web page. This vulnerability has been addressed in the latest patch from Palm and all users are recommended to updat...

Palm Pre WebOS 1.1 - Denial of Service

Palm Pre WebOS 1.1 - Denial of Service I. Description The Palm Pre WebOS version AAAAA..." using 50280 or more characters after the refresh. IV. About This vulnerability was discovered by Townsend Ladd Harris Vulnerability details will be posted at:...

Palm Pre WebOS 1.1 - Denial of Service

I. Description The Palm Pre WebOS version AAAAA..." using 50280 or more characters after the refresh. IV. About This vulnerability was discovered by Townsend Ladd Harris Vulnerability details will be posted at: http://tlhsecurity.blogspot.com/2009/10/palm-pre-webos-version-11-floating...

Palm WebOS 1.01.1 - LunaSysMgr Service Denial of Service

Palm WebOS 1.01.1 - LunaSysMgr Service Denial of Service source: https://www.securityfocus.com/bid/36659/info Palm WebOS is prone to a remote denial-of-service vulnerability because it fails to properly validate user-supplied data. Attackers can leverage this issue to cause an affected device to...

Palm WebOS 1.0/1.1 - 'LunaSysMgr' Service Denial of Service

source: https://www.securityfocus.com/bid/36659/info Palm WebOS is prone to a remote denial-of-service vulnerability because it fails to properly validate user-supplied data. Attackers can leverage this issue to cause an affected device to reboot. Given the nature of this issue, attackers may als...

Palm Pre WebOS version <= 1.1 Floating Point Exception

I. Description The Palm Pre WebOS version = 1.1 suffers from a floating point exception vulnerability when attempting to view a specially crafted web page. This vulnerability has been addressed in the latest patch from Palm and all users are recommended to update to WebOS version 1.2+. II. Impact...

Palm Pre WebOS <=1.1 Remote File Access Vulnerability

I. Description The Palm Pre WebOS =1.1 suffers from a JavaScript injection attack that allows a malicious attacker to access any file on the mobile device. Palm has patched this vulnerability and all users are recommended to upgrade to WebOS version 1.2+. Palm WebOS 1.2 patch information can be...

Palm Pre WebOS <=1.1 Remote File Access Vulnerability

I. Description The Palm Pre WebOS =1.1 suffers from a JavaScript injection attack that allows a malicious attacker to access any file on the mobile device. Palm has patched this vulnerability and all users are recommended to upgrade to WebOS version 1.2+. Palm WebOS 1.2 patch information can be...

Palm Pre WebOS <=1.1 Remote File Access Vulnerability

No description provided by source. I. Description The Palm Pre WebOS =1.1 suffers from a JavaScript injection attack that allows a malicious attacker to access any file on the mobile device. Palm has patched this vulnerability and all users are recommended to upgrade to WebOS version 1.2+. Palm...