PT-2010-5304

Name of the Vulnerable Software and Affected Versions HP Palm webOS versions prior to 2.0 Description A cross-site scripting XSS issue exists, allowing remote attackers to inject arbitrary web script or HTML via a crafted vCard file in the Contacts Application. Recommendations For HP Palm webOS...

HPSBMI02614 SSRT100344 rev.2 - HP webOS Contacts Application, Remote Execution of Arbitrary Code

Potential Security Impact Remote execution of arbitrary code VULNERABILITY SUMMARY A potential security vulnerability has been identified with HP webOS Contacts Application. This vulnerability could be exploited to execute arbitrary HTML or JavaScript. RESOLUTION The vulnerability can be resolved...

HP Palm WebOS multiple security vulnerabilities

Code execution, files access...

[security bulletin] HPSBMI02580 SSRT100254 rev.1 - Palm webOS, Code execution vulnerability in Palm webOS service API

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02516786 Version: 1 HPSBMI02580 SSRT100254 rev.1 - Palm webOS, Code execution vulnerability in Palm webOS service API NOTICE: The information in this Security Bulletin should be acted upon as soo...

[security bulletin] HPSBMI02573 SSRT100227 rev.1 - Palm webOS, webOS Doc Viewer, Execution of Arbitrary Code

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02498311 Version: 1 HPSBMI02573 SSRT100227 rev.1 - Palm webOS, webOS Doc Viewer, Execution of Arbitrary Code NOTICE: The information in this Security Bulletin should be acted upon as soon as...

[security bulletin] HPSBMI02582 SSRT100269 rev.1 - Palm webOS Camera Application, Unauthorized Write Access

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02518539 Version: 1 HPSBMI02582 SSRT100269 rev.1 - Palm webOS Camera Application, Unauthorized Write Access NOTICE: The information in this Security Bulletin should be acted upon as soon as...

CVE-2010-4025

Unspecified vulnerability in Doc Viewer in HP Palm webOS 1.4.1 allows remote attackers to execute arbitrary code via a crafted document, as demonstrated by a Word document...

CVE-2010-4026

Unspecified vulnerability in the service API in HP Palm webOS 1.4.1 allows local users to gain privileges by leveraging the ability to perform certain service calls...

CVE-2010-4027

Unspecified vulnerability in the camera application in HP Palm webOS 1.4.1 allows local users to overwrite arbitrary files via unknown vectors...

Design/Logic Flaw

Unspecified vulnerability in Doc Viewer in HP Palm webOS 1.4.1 allows remote attackers to execute arbitrary code via a crafted document, as demonstrated by a Word document...

Design/Logic Flaw

Unspecified vulnerability in the camera application in HP Palm webOS 1.4.1 allows local users to overwrite arbitrary files via unknown vectors...

Code injection

Unspecified vulnerability in the service API in HP Palm webOS 1.4.1 allows local users to gain privileges by leveraging the ability to perform certain service calls...

CVE-2010-4025

CVE-2010-4025 affects Palm webOS 1.4.1's Doc Viewer. A crafted Word document could allow remote code execution. HP’s security bulletin HPSBMI02573 rev.1 recommends updating to webOS 1.4.5+ (or later) to mitigate; until then, avoid untrusted Word docs. The HP bulletin lists CVSS v2 base 6.8 (AV:L/...

CVE-2010-4026

Unspecified vulnerability in the service API in HP Palm webOS 1.4.1 allows local users to gain privileges by leveraging the ability to perform certain service calls...

CVE-2010-4027

Unspecified vulnerability in the camera application in HP Palm webOS 1.4.1 allows local users to overwrite arbitrary files via unknown vectors...

CVE-2010-4025

Unspecified vulnerability in Doc Viewer in HP Palm webOS 1.4.1 allows remote attackers to execute arbitrary code via a crafted document, as demonstrated by a Word document...

CVE-2010-4026

The CVE-2010-4026 issue concerns HP Palm webOS 1.4.1 where a vulnerability in the Palm webOS service API allows a local user to gain privileges by issuing privileged service calls. The exact root cause isn’t detailed in the provided documents, but HP’s Security Bulletin links CVE-2010-4026 to a c...

CVE-2010-4027

The CVE-2010-4027 issue affects HP Palm webOS 1.4.1, specifically the camera application, enabling a local user to overwrite arbitrary files on the device filesystem via unknown vectors. HP’s security bulletin (HPSBMI02582 SSRT100269 rev.1) confirms the vulnerability and assigns CVSS v2 base metr...

CVE-2010-4025: Undefined Security Weakness

Unspecified vulnerability in Doc Viewer in HP Palm webOS 1.4.1 allows remote attackers to execute arbitrary code via a crafted document, as demonstrated by a Word document...

PT-2010-5241

Name of the Vulnerable Software and Affected Versions HP Palm webOS version 1.4.1 Description The issue allows remote attackers to execute arbitrary code via a crafted document. This can be demonstrated by a Word document. Recommendations For HP Palm webOS version 1.4.1, consider avoiding the use...