CVE-2012-4222

CVE-2012-4222 refers to the Qualcomm KGSL kernel-mode driver in Android 2.3–4.2, where a crafted kgsl_ioctl input can trigger a NULL pointer dereference, causing DoS. Connected docs also cover CVE-2012-4220 (diagchar_core.c) and CVE-2012-4221 (diagchar_core.c/integer overflow) with local DIAG/DIA...

CVE-2012-4221

CVE-2012-4221 involves an integer overflow in the Qualcomm Innovation Center (QuIC) Diagnostics (DIAG) kernel-mode driver for Android 2.3–4.2, specifically in diagchar_core.c. An attacker could exploit crafted arguments via a local diagchar_ioctl call to achieve arbitrary code execution or cause ...

CVE-2012-4222

drivers/gpu/msm/kgsl.c in the Qualcomm Innovation Center QuIC Graphics KGSL kernel-mode driver for Android 2.3 through 4.2 allows attackers to cause a denial of service NULL pointer dereference via an application that uses crafted arguments in a local kgslioctl call...

CVE-2012-4222

drivers/gpu/msm/kgsl.c in the Qualcomm Innovation Center QuIC Graphics KGSL kernel-mode driver for Android 2.3 through 4.2 allows attackers to cause a denial of service NULL pointer dereference via an application that uses crafted arguments in a local kgslioctl call...

Qualcomm Integer oveflow diagnostics

QCIR-2012-00001-1: Multiple security vulnerabilities have been discovered in the handling of the diagcharioctl and kgslioctl system call parameters for the diagnostics DIAG and KGSL graphics kernel drivers for Android...

CVE-2010-3403

Untrusted search path vulnerability in Qualcomm eXtensible Diagnostic Monitor QXDM 03.09.19 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse mfc71enu.dll that is located in the same folder as a .isf file...

Design/Logic Flaw

Untrusted search path vulnerability in Qualcomm eXtensible Diagnostic Monitor QXDM 03.09.19 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse mfc71enu.dll that is located in the same folder as a .isf file...

CVE-2010-3403

The CVE-2010-3403 entry concerns Qualcomm eXtensible Diagnostic Monitor (QXDM) 03.09.19. The vulnerability is an untrusted search path that enables DLL hijacking via a Trojan horse mfc71enu.dll located in the same folder as an .isf file, allowing local users and possibly remote attackers to execu...

CVE-2010-3403

Untrusted search path vulnerability in Qualcomm eXtensible Diagnostic Monitor QXDM 03.09.19 allows local users, and possibly remote attackers, to execute arbitrary code and conduct DLL hijacking attacks via a Trojan horse mfc71enu.dll that is located in the same folder as a .isf file...

Eudora Qualcomm WorldMail 3.0 - IMAPd 'LIST' Remote Buffer Overflow (Metasploit)

$Id: eudoralist.rb 9653 2010-07-01 23:33:07Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Qualcomm WorldMail IMAP Server Directory Traversal (CVE-2005-3189)

The Qualcomm WorldMail product is an email and messaging server. The product is designed for small to large enterprise environments. WorldMail provides, amongst other services, an IMAP server which allows email retrieval. There exists a directory traversal vulnerability in Qualcomm WorldMail IMAP...

Qualcomm WorldMail 3.0 IMAPD LIST Buffer Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Qualcomm...

Qualcomm WorldMail IMAP Literal Token Parsing Buffer Overflow (CVE-2005-4267)

The Internet Message Access Protocol IMAP allows the access and manipulation of electronic mail. A buffer overflow vulnerability exists in the IMAP service component of Qualcomm WorldMail. The flaw is caused by insufficient boundary checks when processing IMAP commands. An unauthenticated attacke...

CVE-2003-1452

Untrusted search path vulnerability in Qualcomm qpopper 4.0 through 4.05 allows local users to execute arbitrary code by modifying the PATH environment variable to reference a malicious smbpasswd program...

CVE-2003-1452

CVE-2003-1452 describes an untrusted search path vulnerability in Qualcomm qpopper 4.0–4.05. The root cause is PATH environment variable manipulation that causes the daemon to execute a malicious smbpasswd program, enabling local users to run arbitrary code. The available records consistently sta...

CVE-2007-3166

Buffer overflow in Qualcomm Eudora 7.1.0.9 allows user-assisted, remote IMAP servers to execute arbitrary code via a long FLAGS response to a SELECT INBOX command...

Buffer overflow

Buffer overflow in Qualcomm Eudora 7.1.0.9 allows user-assisted, remote IMAP servers to execute arbitrary code via a long FLAGS response to a SELECT INBOX command...

CVE-2007-3166

CVE-2007-3166 describes a buffer overflow in Qualcomm Eudora 7.1.0.9 that allows a user-assisted, remote IMAP server to execute arbitrary code via a long FLAGS response to a SELECT INBOX command. The CVE is documented in NVD with a base score of 6.8 (Medium) and an attack vector of NETWORK with n...

CVE-2007-3166

Buffer overflow in Qualcomm Eudora 7.1.0.9 allows user-assisted, remote IMAP servers to execute arbitrary code via a long FLAGS response to a SELECT INBOX command...

Eudora WorldMail MAILMA.exe远程堆溢出漏洞

Eudora WorldMail是一款Windows平台下的邮件服务器软件。 Eudora WorldMail的邮件管理服务程序MAILMA.exe（监听于TCP 106端口）在解析连续的分隔符时存在堆溢出漏洞，远程攻击者可能利用此漏洞控制用户机器。 远程攻击者可以通过发送特制请求来触发这个溢出，导致执行任意指令。 Qualcomm Eudora WorldMail Server 3.1.x 临时解决方法： 限制对106/tcp端口的访问。 厂商补丁： Qualcomm -------- 目前厂商还没有提供补丁或者升级程序，我们建议使用此软件的用户随时关注厂商的主页以获取最新版本：...