16 matches found
CVE-2009-5097
Palm Pre WebOS 1.1 and earlier processes JavaScript in email messages, which allows remote attackers to execute arbitrary JavaScript, as demonstrated by reading PalmDatabase.db3...
Palm Pre WebOS <= 1.1 - Remote File Access Vulnerability
No description provided by source. I. Description The Palm Pre WebOS =1.1 suffers from a JavaScript injection attack that allows a malicious attacker to access any file on the mobile device. Palm has patched this vulnerability and all users are recommended to upgrade to WebOS version 1.2+. Palm...
CVE-2009-5098
The LunaSysMgr process in Palm Pre WebOS 1.1 and earlier, when not viewing web pages in landscape mode, allows remote attackers to cause a denial of service crash via a web page containing a long string following a refresh tag, which triggers a floating point exception...
Code injection
The LunaSysMgr process in Palm Pre WebOS 1.1 and earlier, when not viewing web pages in landscape mode, allows remote attackers to cause a denial of service crash via a web page containing a long string following a refresh tag, which triggers a floating point exception...
CVE-2009-5097: Improper Control of Generation of Code
Palm Pre WebOS 1.1 and earlier processes JavaScript in email messages, which allows remote attackers to execute arbitrary JavaScript, as demonstrated by reading PalmDatabase.db3...
CVE-2009-5098: Undefined Security Weakness
The LunaSysMgr process in Palm Pre WebOS 1.1 and earlier, when not viewing web pages in landscape mode, allows remote attackers to cause a denial of service crash via a web page containing a long string following a refresh tag, which triggers a floating point exception...
PT-2011-1346
Name of the Vulnerable Software and Affected Versions Palm Pre WebOS versions 1.1 and earlier Description The issue allows remote attackers to execute arbitrary JavaScript in email messages. This is demonstrated by the ability to read PalmDatabase.db3. Recommendations For Palm Pre WebOS versions...
PT-2011-1347
Name of the Vulnerable Software and Affected Versions Palm Pre WebOS versions 1.1 and earlier Description The issue allows remote attackers to cause a denial of service, resulting in a crash, by exploiting a weakness in the LunaSysMgr process. This occurs when a web page containing a long string...
CVE-2009-5071
Unspecified vulnerability in Palm Pre WebOS before 1.2.1 has unknown impact and attack vectors related to an "included contact template file."...
CVE-2009-5071
Unspecified vulnerability in Palm Pre WebOS before 1.2.1 has unknown impact and attack vectors related to an "included contact template file."...
CVE-2009-5071
Unspecified vulnerability in Palm Pre WebOS before 1.2.1 has unknown impact and attack vectors related to an "included contact template file."...
PT-2011-1325
Name of the Vulnerable Software and Affected Versions Palm Pre WebOS versions prior to 1.2.1 Description The issue is related to an unspecified vulnerability in an included contact template file, with unknown impact and attack vectors. Recommendations For versions prior to 1.2.1, update to versio...
CVE-2009-5071: Undefined Security Weakness
Unspecified vulnerability in Palm Pre WebOS before 1.2.1 has unknown impact and attack vectors related to an "included contact template file."...
Palm Pre WebOS <=1.1 Remote File Access Vulnerability
I. Description The Palm Pre WebOS =1.1 suffers from a JavaScript injection attack that allows a malicious attacker to access any file on the mobile device. Palm has patched this vulnerability and all users are recommended to upgrade to WebOS version 1.2+. Palm WebOS 1.2 patch information can be...
Palm Pre WebOS <=1.1 Remote File Access Vulnerability
No description provided by source. I. Description The Palm Pre WebOS =1.1 suffers from a JavaScript injection attack that allows a malicious attacker to access any file on the mobile device. Palm has patched this vulnerability and all users are recommended to upgrade to WebOS version 1.2+. Palm...
Palm Pre WebOS 1.0.4 Remote execution of arbitrary HTML code vulnerability
I. Description The Palm Pre WebOS version 1.0.4 and below allows a remote attacker to execute arbitrary HTML code on the phone via certain applications. The affected applications involve the native email client via the notifications system as well as the native calendar application. The vendor ha...