CVE-2007-3483

CVE-2007-3483 affects Research in Motion BlackBerry Enterprise Server 4.0–4.1. The vulnerability arises from a default configuration that allows installation of arbitrary third-party applications on BlackBerry devices, potentially enabling loading of malware. The available documents explicitly de...

CVE-2007-3442

Format string vulnerability on the Research in Motion BlackBerry 7270 before 4.0 SP1 Bundle 108 allows remote attackers to cause a denial of service blocked call reception and calling via format string specifiers in an SIP INVITE message that lacks a host name in the Contact header...

Format string

Format string vulnerability on the Research in Motion BlackBerry 7270 before 4.0 SP1 Bundle 108 allows remote attackers to cause a denial of service blocked call reception and calling via format string specifiers in an SIP INVITE message that lacks a host name in the Contact header...

CVE-2007-3443

The Research in Motion BlackBerry 7270 before 4.0 SP1 Bundle 108 does not properly manage transaction states, which allows remote attackers to cause a denial of service temporary device hang by sending a certain SIP INVITE message, but not providing an ACK when the call is answered...

Design/Logic Flaw

The Research in Motion BlackBerry 7270 before 4.0 SP1 Bundle 108 does not properly manage transaction states, which allows remote attackers to cause a denial of service temporary device hang by sending a certain SIP INVITE message, but not providing an ACK when the call is answered...

Format string

The Research in Motion BlackBerry 7270 with 4.0 SP1 Bundle 83 allows remote attackers to cause a denial of service blocked call reception via a malformed SIP invite message, possibly related to multiple format string specifiers in the From field, a spoofed source IP address, and limitations of th...

CVE-2007-3443

CVE-2007-3443 affects Research in Motion BlackBerry 7270 before 4.0 SP1 Bundle 108. The vulnerability stems from improper management of transaction states in the SIP handling, enabling a remote attacker to cause a denial of service (temporary device hang) by sending a particular SIP INVITE messag...

CVE-2007-3444

The CVE-2007-3444 entry concerns the Research in Motion BlackBerry 7270 with 4.0 SP1 Bundle 83. Affected component: the SIP processing path that handles INVITE messages. Root cause described as potential multiple format string specifiers in the From field, combined with a spoofed source IP and fu...

CVE-2007-3443

The Research in Motion BlackBerry 7270 before 4.0 SP1 Bundle 108 does not properly manage transaction states, which allows remote attackers to cause a denial of service temporary device hang by sending a certain SIP INVITE message, but not providing an ACK when the call is answered...

Stack overflow

Stack-based buffer overflow in the Vivotek Motion Jpeg ActiveX control aka MjpegControl in MjpegDecoder.dll 2.0.0.13 allows remote attackers to execute arbitrary code via a long PtzUrl property value...

CVE-2007-3167

Stack-based buffer overflow in the Vivotek Motion Jpeg ActiveX control aka MjpegControl in MjpegDecoder.dll 2.0.0.13 allows remote attackers to execute arbitrary code via a long PtzUrl property value...

CVE-2007-3167

CVE-2007-3167 describes a stack-based buffer overflow in the Vivotek Motion JPEG ActiveX control (MjpegControl) within MjpegDecoder.dll version 2.0.0.13. The vulnerability arises from handling a very long PtzUrl property value, which can overflow a stack buffer and allow a remote attacker to exec...

Vivotek Motion Jpeg Control (MjpegDecoder.dll 2.0.0.13) Remote Exploit

No description provided by source. !-- IE 6 / Vivotek Motion Jpeg Control MjpegDecoder.dll 2.0.0.13 remote buffer overflow exploit / win 2k sp4 en version by rgod site: retrogod.altervista.org software site: http://www.vivotek.com/ "VIVOTEK INC. is a leading IP surveillance camera and Network...

Vivotek Motion Jpeg Control - MjpegDecoder.dll 2.0.0.13 Remote Overflow

Vivotek Motion Jpeg Control - MjpegDecoder.dll 2.0.0.13 Remote Overflow ' metasploit one, alpha2... add a user 'sun' with pass 'tzu' FRAGMENT =...

Vivotek Motion Jpeg Control - 'MjpegDecoder.dll 2.0.0.13' Remote Overflow

' metasploit one, alpha2... add a user 'sun' with pass 'tzu' FRAGMENT =...

Research In Motion TeamOn Import Object ActiveX control buffer overflow

Overview The Research In Motion TeamOn Import Object ActiveX control contains a buffer overflow, which could allow an attacker to execute arbitrary code on a vulnerable system. Description The Research In Motion TeamOn Import Object is an ActiveX control, which is provided by the file TOImport.dl...

Pixel Motion Config.PHP远程命令执行漏洞

Pixel Motion是一款基于PHP的web应用程序。 Pixel Motion不正确过滤用户提交的URI数据，远程攻击者可以利用漏洞以WEB进程权限执行任意命令。 问题是由于‘config. php’脚本对用户提交的web参数缺少过滤，提交恶意的远程服务器作为包含对象，可导致以WEB进程权限执行任意PHP代码。 Pixel Motion Pixel Motion 2.1.1 目前没有解决方案提供，请关注以下链接： http://www.pixelmotion.org/ !/usr/bin/perl Affected.scr..: Blog Pixel Motion V2.1.1...

CVE-2006-5086

Blog Pixel Motion 2.1.1 allows remote attackers to change the username and password for the admin user via a direct request to inserebase.php with modified 1 login and 2 pass parameters. NOTE: this issue was claimed to be SQL injection by the original researcher, but it is not...

CVE-2006-5085

Static code injection vulnerability in config.php in Blog Pixel Motion 2.1.1 allows remote attackers to execute arbitrary PHP code via the nomblog parameter, which is injected into include/variables.php...

CVE-2006-5085

Static code injection vulnerability in config.php in Blog Pixel Motion 2.1.1 allows remote attackers to execute arbitrary PHP code via the nomblog parameter, which is injected into include/variables.php...