QuickOffice 3.1.0 For iPhone/iPod Touch Denial Of Service

Exploit: QuickOffice v3.1.0 for iPhone/iPod Touch Malformed HTTP Method Remote DoS Date: 14/06/2010 Author: Nishant Das Patnaik Website: http://nishantdaspatnaik.yolasite.com Software Link: http://itunes.apple.com/us/app/quickoffice-connect/id304673686?mt=8 Version: 3.1.0 Tested on: iPod 2G with...

QuickOffice v3.1.0 for iPhone/iPod Touch Malformed HTTP Method DoS

Exploit for hardware platform in category dos / poc ========================================================================= QuickOffice v3.1.0 for iPhone/iPod Touch Malformed HTTP Method Remote DoS ========================================================================= Exploit: QuickOffice...

Impact PDF Reader v2.0 for iPhone/iPod Touch POST Method Remote DoS

Exploit for hardware platform in category dos / poc =================================================================== Impact PDF Reader v2.0 for iPhone/iPod Touch POST Method Remote DoS =================================================================== Exploit: Impact PDF Reader v2.0 for...

Office 2 iPhone XLS Denial of Service

Exploit for hardware platform in category dos / poc ===================================== Office 2 iPhone XLS Denial of Service ===================================== I wrote a fuzzer "dumb fuzzer" and used a sample from http://www.inj3ct0r.com/sploits/12662.xls which I randomly found on the...

Office^2 iPhone - .XLS Denial of Service

Office^2 iPhone - .XLS Denial of Service I wrote a fuzzer "dumb fuzzer" and used a sample from http://www.ccp14.ac.uk/ccp/web-mirrors/bca-spreadsheets/scanplot101.xls which I randomly found on the internet. I mutated the data and tested roughly 1000 cases on several Document Reader Applications f...

Savy Soda Documents (Mobile Office Suite) XLS Denial of Service

Exploit for hardware platform in category dos / poc =============================================================== Savy Soda Documents Mobile Office Suite XLS Denial of Service =============================================================== I wrote a fuzzer "dumb fuzzer" and used a sample from...

Savy Soda Documents - Mobile Office Suite .XLS Denial of Service

Savy Soda Documents - Mobile Office Suite .XLS Denial of Service I wrote a fuzzer "dumb fuzzer" and used a sample from http://www.ccp14.ac.uk/ccp/web-mirrors/bca-spreadsheets/scanplot101.xls which I randomly found on the internet. I mutated the data and tested roughly 1000 cases on several Docume...

Savy Soda Documents - Mobile Office Suite '.XLS' Denial of Service

I wrote a fuzzer "dumb fuzzer" and used a sample from http://www.ccp14.ac.uk/ccp/web-mirrors/bca-spreadsheets/scanplot101.xls which I randomly found on the internet. I mutated the data and tested roughly 1000 cases on several Document Reader Applications for iPhone...

GoodiWare GoodReader iPhone - .XLS Denial of Service

GoodiWare GoodReader iPhone - .XLS Denial of Service I wrote a fuzzer "dumb fuzzer" and used a sample from http://www.ccp14.ac.uk/ccp/web-mirrors/bca-spreadsheets/scanplot101.xls which I randomly found on the internet. I mutated the data and tested roughly 1000 cases on several Document Reader...

Office^2 iPhone - '.XLS' Denial of Service

I wrote a fuzzer "dumb fuzzer" and used a sample from http://www.ccp14.ac.uk/ccp/web-mirrors/bca-spreadsheets/scanplot101.xls which I randomly found on the internet. I mutated the data and tested roughly 1000 cases on several Document Reader Applications for iPhone...

GoodiWare GoodReader iPhone - '.XLS' Denial of Service

I wrote a fuzzer "dumb fuzzer" and used a sample from http://www.ccp14.ac.uk/ccp/web-mirrors/bca-spreadsheets/scanplot101.xls which I randomly found on the internet. I mutated the data and tested roughly 1000 cases on several Document Reader Applications for iPhone...

VUPEN Security Research - Apple Safari WebKit HTML Button Use-after-free Vulnerability (CVE-2010-1392)

VUPEN Security Research - Apple Safari WebKit HTML Button Use-after-free Vulnerability CVE-2010-1392 http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "Safari is a web browser developed by Apple. As of February 2010, Safari was the fourth most widely used browser, with...

Researcher Finds Data Access Flaw in iPhone

A researcher was able to gain unfettered access to his iPhone 3GS from Ubuntu 10.04. If he connected the device whilst it was turned off and then turned it on, Ubuntu auto-mounted the file system and was able to access several folders despite never having previously been connected to the iPhone...

iPhone AT&T WiFi Settings Open to MiTM Attacks

A security researcher has discovered that any wireless network can pretend to be an AT&T Wi-Fi hot spot and thus lure unsuspecting iPhone users to an untrusted network connection. Read the full article. CNet...

Has Apple Gotten Religion on Software Security?

Information security is an unpredictable, fluid discipline. There are very few absolute truths, but for the last few years, one of those has been that Apple isn’t paying much attention to software security. At least that’s the received wisdom. This theory is based mainly on the fact that security...

Apple iPhone 3.1.2 (7D11) Model MB702LL Mobile Safari Denial-of-Service

No description provided by source. Apple iPhone 3.1.2 7D11 Model MB702LL Mobile Safari Denial-of-Service Author: Matthew Bergin Date: 4/19/10 Implications: Stack Exhaustion html body background =...

The iPad: As Insecure As The iPhone

Forbes reporter Andy Greenberg polled a group of security researchers about the security posture of Apple’s new iPad device and comes away with a simple conclusion: The iPad is just as insecure as the iPhone. Some quotes from the story: Aaron Portnoy, security researcher, Tipping Point: “It’s...

Apple iPhone 3.1.2 - 7D11 Model MB702LL Mobile Safari Denial of Service

Apple iPhone 3.1.2 - 7D11 Model MB702LL Mobile Safari Denial of Service Apple iPhone 3.1.2 7D11 Model MB702LL Mobile Safari Denial-of-Service Author: Matthew Bergin Date: 4/19/10 Implications: Stack Exhaustion body background =...

Apple iPhone 3.1.2 - '7D11' Model MB702LL Mobile Safari Denial of Service

Apple iPhone 3.1.2 7D11 Model MB702LL Mobile Safari Denial-of-Service Author: Matthew Bergin Date: 4/19/10 Implications: Stack Exhaustion body background = "AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA...

iPhone Unlock Utility Actually a DNS Trojan

An application that offers to unlock iPhones is actually designed to hijack internet connections on compromised Windows PCs, security watchers warn. Read the full article. The Register...