CVE-2011-2041

The Start Before Logon SBL functionality in Cisco AnyConnect Secure Mobility Client formerly AnyConnect VPN Client before 2.3.254 on Windows, and on Windows Mobile, allows local users to gain privileges via unspecified user-interface interaction, aka Bug ID CSCta40556...

CVE-2011-2039

The helper application in Cisco AnyConnect Secure Mobility Client formerly AnyConnect VPN Client before 2.3.185 on Windows, and on Windows Mobile, downloads a client executable file vpndownloader.exe without verifying its authenticity, which allows remote attackers to execute arbitrary code via t...

Design/Logic Flaw

The helper application in Cisco AnyConnect Secure Mobility Client formerly AnyConnect VPN Client before 2.3.185 on Windows, and on Windows Mobile, downloads a client executable file vpndownloader.exe without verifying its authenticity, which allows remote attackers to execute arbitrary code via t...

Microsoft Reader 2.1.1.3143 - Integer Overflow (2)

Microsoft Reader 2.1.1.3143 - Integer Overflow 2 Source: http://aluigi.org/adv/msreader3-adv.txt Luigi Auriemma Application: Microsoft Reader http://www.microsoft.com/reader Versions: = 2.1.1.3143 PC version = 2.6.1.7169 Origami version the non-PC versions have not been tested Platforms: Windows,...

Microsoft Reader 2.1.1.3143 - Null Byte Write

Luigi Auriemma Application: Microsoft Reader http://www.microsoft.com/reader Versions: | 8D47 01 |LEA EAX,DWORD PTR DS:EDI+1 ; size at offset 0xbd of the PoC 5FFF634D |. 50 |PUSH EAX 5FFF634E |. E8 2B470000 |CALL ; malloc...

Microsoft Reader 2.1.1.3143 - Array Overflow

Microsoft Reader 2.1.1.3143 - Array Overflow Source: http://aluigi.org/adv/msreader4-adv.txt Luigi Auriemma Application: Microsoft Reader http://www.microsoft.com/reader Versions: = 2.1.1.3143 PC version = 2.6.1.7169 Origami version the non-PC versions have not been tested Platforms: Windows,...

Microsoft Reader 2.1.1.3143 - Integer Overflow (1)

Source: http://aluigi.org/adv/msreader1-adv.txt Luigi Auriemma Application: Microsoft Reader http://www.microsoft.com/reader Versions: 8B7B 68 MOV EDI,DWORD PTR DS:EBX+68 01083071 |. 8BF7 MOV ESI,EDI 01083073 |. C1E6 04 SHL ESI,4 01083076 |. 837D 08 00...

Mobile Zeus Variants Target Windows Mobile, Symbian Phones

There are two new versions of the Zeus malware making the rounds right now, both of which target popular mobile phone platforms. One of the variants targets Windows Mobile devices, while the other is going after the Symbian platform, and both are intent on silently stealing data from infected...

Microsoft Targets Android with Patent Infringement Allegations

The mobile phone wars became more interesting late on Tuesday when Microsoft publicly claimed for the first time that Google's Android operating system infringes on its intellectual property. According to sources close to the company, Microsoft believes that Android infringes on its patented...

Windows Mobile 6.1 and 6.5 Double Free Denial of Service

No description provided by source. Vendor: Microsoft Product: Windows Mobile 6.1 and 6.5 Vulnerability: Double Free Denial of Service Tested vulnerable versions: Windows Mobile 6.1 and 6.5 Tested on : HTC Touch WM 6.1, HTC Touch2 WM 6.5 CREDITS: Celil Ünüver from SecurityArchitect.Org CONTACT:...

[SecurityArchitect-009]: Microsoft Windows Mobile Double Free Vulnerability

Vendor: Microsoft Product: Windows Mobile Vulnerability: Double Free Tested vulnerable versions: Windows Mobile 6.1 and 6.5 Tested on : HTC Touch WM 6.1, HTC Touch2 WM 6.5 CREDITS: Celil nver from SecurityArchitect.Org CONTACT: celilunuvern0sp4mgmail.com Vulnerability Details and Analysis: The...

Microsoft Windows Mobile double free vulnerability

Double free on receiving VCF via MMS/bluetooth...

Windows Mobile 6.1 / 6.5 Denial Of Service

Vendor: Microsoft Product: Windows Mobile 6.1 and 6.5 Vulnerability: Double Free Denial of Service Tested vulnerable versions: Windows Mobile 6.1 and 6.5 Tested on : HTC Touch WM 6.1, HTC Touch2 WM 6.5 CREDITS: Celil Ünüver from SecurityArchitect.Org CONTACT: celilunuvern0sp4mgmail.com...

Windows Mobile 6.1 and 6.5 Double Free Denial of Service

Exploit for windows platform in category dos / poc ======================================================== Windows Mobile 6.1 and 6.5 Double Free Denial of Service ======================================================== Product: Windows Mobile 6.1 and 6.5 Vulnerability: Double Free Denial of...

Microsoft Windows Mobile 6.1/6.5 - Double-Free Denial of Service

Vendor: Microsoft Product: Windows Mobile 6.1 and 6.5 Vulnerability: Double Free Denial of Service Tested vulnerable versions: Windows Mobile 6.1 and 6.5 Tested on : HTC Touch WM 6.1, HTC Touch2 WM 6.5 CREDITS: Celil Ünüver from SecurityArchitect.Org CONTACT: celilunuvern0sp4mgmail.com...

Microsoft Windows Mobile 6.16.5 - Double-Free Denial of Service

Microsoft Windows Mobile 6.16.5 - Double-Free Denial of Service Vendor: Microsoft Product: Windows Mobile 6.1 and 6.5 Vulnerability: Double Free Denial of Service Tested vulnerable versions: Windows Mobile 6.1 and 6.5 Tested on : HTC Touch WM 6.1, HTC Touch2 WM 6.5 CREDITS: Celil Ünüver from...

Microsoft Windows Mobile - Overly Long vCard Name Field Denial of Service

Microsoft Windows Mobile - Overly Long vCard Name Field Denial of Service source: https://www.securityfocus.com/bid/44287/info Microsoft Windows Mobile is prone to a denial-of-service vulnerability because it fails to adequately validate user-supplied input. An attacker can exploit this issue to...

Microsoft Windows Mobile - Overly Long vCard Name Field Denial of Service

source: https://www.securityfocus.com/bid/44287/info Microsoft Windows Mobile is prone to a denial-of-service vulnerability because it fails to adequately validate user-supplied input. An attacker can exploit this issue to crash a device running Windows Mobile, denying service to legitimate users...

windows Mobile 6.5 TR Phone Call Shellcode

Exploit for win32 platform in category shellcode ========================================== windows Mobile 6.5 TR Phone Call Shellcode ========================================== / Device: HTC Touch2 System: Windows Mobile 6.5 TR WinCE 5.0.2 Coded by Celil ‹n¸ver from SecurityArchitect Contact:...

Windows Mobile 6.5 TR Phone Call Shellcode

Windows Mobile 6.5 TR Phone Call Shellcode. Shellcode exploit for windows platform Title: Windows Mobile 6.5 TR Phone Call Shellcode Author: Celil Ünüver / Device: HTC Touch2 System: Windows Mobile 6.5 TR WinCE 5.0.2 Coded by Celil ‹n¸ver from SecurityArchitect Contact: celilunuvernspamgmail.com...