Android Emergency Dialing Initiation Vulnerability

Android is a Linux-based open source operating system developed by Google Inc. and the Open Handheld Consortium. A security vulnerability exists in Android's emergency dialing activation feature. The vulnerability is caused by the system-level Intent mechanism...

MGASA-2016-0344 Updated asterisk packages fixes security vulnerability

The overlap dialing feature in chansip allows chansip to report to a device that the number that has been dialed is incomplete and more digits are required. If this functionality is used with a device that has performed username/password authentication RTP resources are leaked. This occurs becaus...

Asterisk chan_sip Overlap Dialing Feature DoS (AST-2016-007)

According to its SIP banner, the version of Asterisk running on the remote host is 11.x prior to 11.23.1, 13.x prior to 13.11.1, 11.6-certx prior to 11.6-cert15, or 13.8-certx prior to 13.8-cert3. It is, therefore, affected by a flaw in the overlap dialing feature in chansip due to a failure to...

FreeBSD : asterisk -- RTP Resource Exhaustion (5cb18881-7604-11e6-b362-001999f8d30b)

The Asterisk project reports : The overlap dialing feature in chansip allows chansip to report to a device that the number that has been dialed is incomplete and more digits are required. If this functionality is used with a device that has performed username/password authentication RTP resources...

asterisk -- RTP Resource Exhaustion

The Asterisk project reports: The overlap dialing feature in chansip allows chansip to report to a device that the number that has been dialed is incomplete and more digits are required. If this functionality is used with a device that has performed username/password authentication RTP resources...

Apple Mac OS X Multiple Vulnerabilities-01 (Mar 2016)

Apple Mac OS X is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

CVE-2016-1770

The Reminders component in Apple OS X before 10.11.4 allows attackers to bypass an intended user-confirmation requirement and trigger a dialing action via a tel: URL...

CVE-2016-1770

The Reminders component in Apple OS X before 10.11.4 allows attackers to bypass an intended user-confirmation requirement and trigger a dialing action via a tel: URL...

Design/Logic Flaw

The Reminders component in Apple OS X before 10.11.4 allows attackers to bypass an intended user-confirmation requirement and trigger a dialing action via a tel: URL...

CVE-2016-1770

The CVE-2016-1770 issue affects the Reminders component in OS X El Capitan prior to 10.11.4. Root cause: a tel: URL triggering a dialing action without user confirmation due to insufficient entitlement checks. Impact: ability to trigger a call without prompting the user. Mitigation: Apple release...

CVE-2016-1770

The Reminders component in Apple OS X before 10.11.4 allows attackers to bypass an intended user-confirmation requirement and trigger a dialing action via a tel: URL...

CVE-2015-5820

WebKit in Apple iOS before 9 allows remote attackers to trigger a dialing action via a crafted 1 tel://, 2 facetime://, or 3 facetime-audio:// URL...

CVE-2015-5820

WebKit in Apple iOS before 9 allows remote attackers to trigger a dialing action via a crafted 1 tel://, 2 facetime://, or 3 facetime-audio:// URL...

Code injection

WebKit in Apple iOS before 9 allows remote attackers to trigger a dialing action via a crafted 1 tel://, 2 facetime://, or 3 facetime-audio:// URL...

UBUNTU-CVE-2015-5820

WebKit in Apple iOS before 9 allows remote attackers to trigger a dialing action via a crafted 1 tel://, 2 facetime://, or 3 facetime-audio:// URL...

CVE-2015-5820

WebKit in Apple iOS before 9 allows remote attackers to trigger a dialing action via a crafted 1 tel://, 2 facetime://, or 3 facetime-audio:// URL...

CVE-2015-5820

CVE-2015-5820 affects WebKit in Apple iOS prior to iOS 9. A crafted tel://, facetime://, or facetime-audio:// URL can trigger a dialing action, enabling remote dialing via web content. The documentation specifies the vulnerability arises from WebKit/URL handling; exploits or in‑the‑wild details a...

CVE-2013-5144

Technical details about CVE-2013-5144 are not publicly available in the provided connected documents. The description here summarizes the issue, but no vendor/version specifics or remediation are given. Monitor for updates.

CVE-2013-5160

Passcode Lock in Apple iOS before 7.0.2 on iPhone devices allows physically proximate attackers to bypass an intended passcode requirement, and dial arbitrary telephone numbers, by making a series of taps of the emergency-call button to trigger a NULL pointer dereference...

Hardware based malware steals contacts from all mobile platforms using only the Audio Jack!

Indian Security Research Atul Alex presented his surprise paper at the International Malware Conference, MalCon on what can be termed as the onset of next generation of hardware based malware that can target mobile devices irrespective of Platforms. Typically, one of the largest challenges for...