Samsung Kies code-related vulnerabilities

Samsung Kies is an application from the South Korean company Samsung Samsung for data synchronization between devices. The program is mainly used to connect Samsung devices to a computer and supports features such as file management and device updates. A security vulnerability exists in versions...

CVE-2012-3807

Samsung Kies before 2.5.0.120942711 has arbitrary file execution...

CVE-2012-3809

Samsung Kies before 2.5.0.120942711 has arbitrary directory modification...

CVE-2012-3806

Samsung Kies before 2.5.0.120942711 contains a NULL pointer dereference vulnerability which could allow remote attackers to perform a denial of service...

CVE-2012-3808

Samsung Kies before 2.5.0.120942711 has arbitrary file modification...

CVE-2012-3810

Samsung Kies before 2.5.0.120942711 has registry modification...

Design/Logic Flaw

Samsung Kies before 2.5.0.120942711 has arbitrary file modification...

Design/Logic Flaw

Samsung Kies before 2.5.0.120942711 has arbitrary directory modification...

Information disclosure

Samsung Kies before 2.5.0.120942711 has registry modification...

Null pointer dereference

Samsung Kies before 2.5.0.120942711 contains a NULL pointer dereference vulnerability which could allow remote attackers to perform a denial of service...

Privilege escalation

Samsung Kies before 2.5.0.120942711 has arbitrary file execution...

CVE-2012-3810

Samsung Kies before 2.5.0.120942711 has registry modification...

CVE-2012-3810

CVE-2012-3810 pertains to Samsung Kies before 2.5.0.12094_27_11, with multiple vulnerabilities arising from the CmdAgentLib and related ActiveX components. The attached documents describe: (1) CVE-2012-3810 — Arbitrary Registry Modification via CmdAgentLib, enabling manipulation of registry keys/...

CVE-2012-3809

Samsung Kies before 2.5.0.120942711 has arbitrary directory modification...

CVE-2012-3809

Samsung Kies before 2.5.0.12094_27_11 is affected by multiple vulnerabilities linked to its ActiveX and firmware update components. CVE-2012-3809 (Arbitrary Directory Modification) arises from a flaw in CmdAgentLib within CmdAgent.dll (Samsung Kies External\FirmwareUpdate) that allows modificatio...

CVE-2012-3808

Samsung Kies before 2.5.0.120942711 has arbitrary file modification...

CVE-2012-3808

CVE-2012-3808 concerns Samsung Kies. The connected docs confirm a vulnerability class of Arbitrary File Modification in Kies versions prior to 2.5.0.12094_27_11, caused by insecure operations in the CmdAgentLib/CmdAgent dlls (ICommandAgent interface) used by Kies’ firmware update component. The a...

CVE-2012-3807

Samsung Kies before 2.5.0.120942711 has arbitrary file execution...

CVE-2012-3807

Samsung Kies before 2.5.0.12094_27_11 is affected by CVE-2012-3807 (and related CVEs) with arbitrary file execution via vulnerable components (notably ActiveX controls and related DLLs). Public sources indicate multiple vulnerabilities in Samsung Kies ActiveX/DCAPARAGONGM.dll and CmdAgent.dll, en...

CVE-2012-3806

Samsung Kies before 2.5.0.120942711 contains a NULL pointer dereference vulnerability which could allow remote attackers to perform a denial of service...