78 matches found
CVE-2012-2993
Microsoft Windows Phone 7 does not verify the domain name in the subject's Common Name CN field of an X.509 certificate, which allows man-in-the-middle attackers to spoof an SSL server for the 1 POP3, 2 IMAP, or 3 SMTP protocol via an arbitrary valid certificate...
PT-2012-4419 · Microsoft · Windows Phone 7
Name of the Vulnerable Software and Affected Versions: Microsoft Windows Phone 7 affected versions not specified Description: The issue allows man-in-the-middle attackers to spoof an SSL server for the POP3, IMAP, or SMTP protocol via an arbitrary valid certificate, as Microsoft Windows Phone 7...
CVE-2012-2993: Improper Certificate Validation
Microsoft Windows Phone 7 does not verify the domain name in the subject's Common Name CN field of an X.509 certificate, which allows man-in-the-middle attackers to spoof an SSL server for the 1 POP3, 2 IMAP, or 3 SMTP protocol via an arbitrary valid certificate...
Windows Phone 7 does not check certificate Common Names when sending or receiving emails over SSL.
Overview Windows Phone 7 does not check CN Common Name of server certificates when receiving or sending e-mails using POP3/IMAP/SMTP servers using SSL. Description Windows Phone 7 fails to check the CN Common Name of server certificates when receiving or sending e-mails using POP3/IMAP/SMTP serve...
Microsoft Windows Phone 7.5消息处理拒绝服务漏洞
Bugtraq ID: 51179 Microsoft Windows Phone是一款智能手机设备,基于移动windows操作系统 Microsoft Windows Phone处理消息存在错误,攻击者可以构建特制文本消息通过SMS, Facebook chat或Windows Live发送,使目标用户设备重启或处理消息相关的功能不能使用 0 Microsoft Windows Phone 7.5 厂商解决方案 目前没有详细解决方案提供: http://www.microsoft.com/windowsmobile/default.mspx...
Windows Phone 7.5 Denial of Service Attack Vulnerability (Video Demonstration)
Denial of Service Attack Vulnerability in Windows Phone 7.5 Microsoft's range of Windows Phones suffer from a denial-of-service attack bug that allows attackers to reboot the device and disable the messaging functionality on a device. A malicious SMS sent to a Windows Phone 7.5 device will force ...
Windows Phone 7.5 Denial of Service Attack Vulnerability (Video Demonstration)
Denial of Service Attack Vulnerability in Windows Phone 7.5 Microsoft's range of Windows Phones suffer from a denial-of-service attack bug that allows attackers to reboot the device and disable the messaging functionality on a device. A malicious SMS sent to a Windows Phone 7.5 device will force ...
HTC HD7 "HTCUtility.dll" IOCTL安全限制绕过漏洞
BUGTRAQ ID: 50697 HTC HD7是采用了Windows Phone 7操作系统的智能手机。 HTC HD7在处理0x9020002C IOCTL请求时,其中的HTCUtility.dll驱动程序中存在错误,可被利用读取或写入任意内核内存。 HTC HD7 厂商补丁: HTC --- 目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载: http://www.htc.com...
Class Action Lawsuit Accuses Microsoft of Illegal Geotagging
UPDATE: A class action lawsuit filed in U.S. District Court in Seattle, Washington, accuses Microsoft Corp. of collecting geolocation information from photos taken with phones running its Windows Phone 7 operating system, even without the user’s consent. The suit, filed by one Rebecca Cousineau, ...
Microsoft warns against hacked Windows Phone 7 updates !
Microsoft is sorry, quite sorry indeed, that so many Windows Phone 7 owners have yet to receive the NoDo update for their handset. In a weekly written update today, the Windows Phone 7 team expressed sympathy to owners frustrated over the lag in receiving the update: "You want the latest technolo...
Internet Explorer and Safari first to fall at Pwn2Own 2011, Chrome and Firefox still standing !
Pwn2Own, the annual three-day browser hackathon, has already claimed its first two victims: IE8 on Windows 7 64-bit, and Safari 5 on Mac OS X. Google Chrome looks set to survive for its third year in a row. Internet Explorer 8 was thoroughly destroyed by independent researcher Stephen Fewer. "He...
Geohot Will Try His Hacking Skills On Windows Phone 7 !
Geohot has been causing quite a disturbance due to his ongoing legal battle with Sony. Geohot jailbroke the Sony PS3 to run unsigned code. Sony is now suing him, and Geohot is under the tech industry's spotlight more than ever. So, what does all this have to do with Windows Phone 7? Microsoft has...
White hat hack breaks Windows Phone Marketplace security !
Video shows how Windows Phone 7 apps can be easily swiped and stripped of DRM protections Once more, Microsoft finds itself in the unenviable position of having one of its security flaws shared with the world. WPCentral has posted a video made by a "'white hat' developer" that shows how cyber...
Fiddler v2.3.1.0 ( Web Debugging Proxy tool ) - Latest Version Download
"Fiddler is a Web Debugging Proxy which logs all HTTPS traffic between your computer and the Internet. Fiddler allows you to inspect all HTTPS traffic, set breakpoints, and "fiddle" with incoming or outgoing data. Fiddler includes a powerful event-based scripting subsystem, and can be extended...
Update to support copying .mkv files to Windows Phone from a computer that is running Windows
None None...
Microsoft Visual Studio 2010 Express for Windows Phone - All Languages
Microsoft Visual Studio 2010 Express for Windows Phone - ENU, DEU, ESN, FRA, ITA all languages...
Microsoft Visual Studio 2012 Shell (Minimum) MSI - Language Neutral
This MSI is included in all languages of the following bundles products a customer would install: Team Explorer 2012 Feedback Client 2012 Professional 2012 Premium 2012 Ultimate 2012 Test Professional 2012 Express 2012 for Web Express 2012 for Windows 8 Express 2012 for Windows Desktop Express 20...