CVE-2012-5859

Samsung Kies Air (Android) versions 2.1.207051 and 2.1.210161 are affected by CVE-2012-5859, which allows remote attackers to cause a denial of service (crash) by sending a crafted request to /www/apps/KiesAir/jws/ssd.php. The issue, described as a DoS via a crafted HTTP request, is tied to Kies ...

CVE-2012-5858

CVE-2012-5858 affects Samsung Kies Air (versions 2.1.207051 and 2.1.210161). The vulnerability stems from IP-based authentication, enabling remote attackers to spoof the IP and perform MITM to read phone contents. Public details in connected sources confirm an authorization bypass/DoS scenario ti...

EUVD-2012-5736

Samsung Kies Air 2.1.207051 and 2.1.210161 relies on the IP address for authentication, which allows remote man-in-the-middle attackers to read arbitrary phone contents by spoofing or controlling the IP address...

CVE-2012-5859

Samsung Kies Air 2.1.207051 and 2.1.210161 allows remote attackers to cause a denial of service crash via a crafted request to www/apps/KiesAir/jws/ssd.php...

[CVE-2012-5858] [CVE-2012-5859] DoS/Authorization Bypass - Kies Air

Name: CVE-2012-5858 CVE-2012-5859 DoS/Authorization Bypass - Kies Air Package: com.samsung.swift.app.kiesair Affected versions: 2.1.207051, 2.1.210161 Testing Device: Samsung S3 AT&T - SAMSUNG-SGH-I747 Android Version: 4.0.4/ Build Number: IMM76D.I747UCALH9 Vendor homepage:...

Samsung Kies Arbitrary Command Execution (CVE-2012-3807)

An arbitrary command execution vulnerability has been reported in Samsung Kies. The vulnerability is due to insufficient validation of incoming requests. A remote attacker can exploit this vulnerability by enticing a target user to visit a specially crafted web page using an affected version of...

Samsung Kies Air security vulnerabilities

DoS, authentication bypass...

Kies Air Denial Of Service / Authorization Bypass

Name: CVE-2012-5858 CVE-2012-5859 DoS/Authorization Bypass - Kies Air Package: com.samsung.swift.app.kiesair Affected versions: 2.1.207051, 2.1.210161 Testing Device: Samsung S3 AT&T - SAMSUNG-SGH-I747 Android Version: 4.0.4/ Build Number: IMM76D.I747UCALH9 Vendor homepage:...

Multiple vulnerabilities in Samsung Kies

Advisory ID: HTB23099 Product: Samsung Kies Vendor: Samsung Electronics Vulnerable Versions: 2.3.2.1205420 and probably prior Tested Version: 2.3.2.1205420 Vendor Notification: June 25, 2012 Public Disclosure: October 15, 2012 Vulnerability Type: NULL Pointer Dereference CWE-476, Improper Access...

Samsung Kies 2.3.2.12054_20 - Multiple Vulnerabilities

Samsung Kies 2.3.2.1205420 - Multiple Vulnerabilities Advisory ID: HTB23099 Product: Samsung Kies Vendor: Samsung Electronics Vulnerable Versions: 2.3.2.1205420 and probably prior Tested Version: 2.3.2.1205420 Vendor Notification: June 25, 2012 Public Disclosure: October 15, 2012 Vulnerability...

Samsung Kies 2.3.2.12054_20 - Multiple Vulnerabilities

Advisory ID: HTB23099 Product: Samsung Kies Vendor: Samsung Electronics Vulnerable Versions: 2.3.2.1205420 and probably prior Tested Version: 2.3.2.1205420 Vendor Notification: June 25, 2012 Public Disclosure: October 15, 2012 Vulnerability Type: NULL Pointer Dereference CWE-476, Improper Access...

Samsung Kies 2.3.2.12054_20 NULL Pointer Dereference / Access Control

Advisory ID: HTB23099 Product: Samsung Kies Vendor: Samsung Electronics Vulnerable Versions: 2.3.2.1205420 and probably prior Tested Version: 2.3.2.1205420 Vendor Notification: June 25, 2012 Public Disclosure: October 15, 2012 Vulnerability Type: NULL Pointer Dereference CWE-476, Improper Access...

CVE-2012-2990

The MASetupCaller ActiveX control before 1.4.2012.508 in MASetupCaller.dll in MarkAny ContentSAFER, as distributed in Samsung KIES before 2.3.2.120741313, does not properly implement unspecified methods, which allows remote attackers to download an arbitrary program onto a client machine, and...

Hardcoded credentials

The MASetupCaller ActiveX control before 1.4.2012.508 in MASetupCaller.dll in MarkAny ContentSAFER, as distributed in Samsung KIES before 2.3.2.120741313, does not properly implement unspecified methods, which allows remote attackers to download an arbitrary program onto a client machine, and...

CVE-2012-2990

The MASetupCaller ActiveX control before 1.4.2012.508 in MASetupCaller.dll in MarkAny ContentSAFER, as distributed in Samsung KIES before 2.3.2.120741313, does not properly implement unspecified methods, which allows remote attackers to download an arbitrary program onto a client machine, and...

CVE-2012-2990

The CVE-2012-2990 entry concerns the MarkAny ContentSAFER MASetupCaller ActiveX control (MASetupCaller.dll) bundled with Samsung KIES. The vulnerability affects versions prior to 1.4.2012.508 and is triggered by certain method calls in the ActiveX, allowing a remote attacker to download and execu...

MarkAny ContentSAFER MASetupCaller ActiveX control arbitrary download and execution

Overview The MarkAny ContentSAFER MASetupCaller ActiveX control fails to restrict access to dangerous methods, which can allow a remote unauthenticated attacker to download and execute arbitrary code on a vulnerable system. Description MarkAny ContentSAFER is a DRM and watermarking product that i...

Multiple vulnerabilities in Samsung Kies

High-Tech Bridge Security Research Lab has discovered multiple vulnerabilities in Samsung Kies synchronization utility that allows remote attacker to compromise affected system, execute and modify arbitrary files, modify arbitrary directories and modify System Registry with privileges of the...