CVE-2008-1938

Sony mylo COM-2 firmware before 1.002 does not verify server SSL certificates, enabling potential information disclosure and spoofing. Affected products include the Japan and US models of mylo COM-2 system software prior to Ver.1.002. Root cause: SSL/TLS server certificate validation is not perfo...

JVN#76788395 Sony mylo COM-2 does not verify server SSL certificate

Sony mylo COM-2, a mobile terminal equipped with a web browser and media palyer, contains a vulnerability where it does not verify the server certificate when connecting to a server via SSL/TLS. Impact Normally, when a client connects to a web server through a SSL/TLS connection, it would verify...

Sony Playstation Version Detection

Binary data 4406.prm...

ImageStation (SonyISUpload.cab 1.0.0.38) ActiveX Buffer Overflow PoC

No description provided by source. html headtitleBuffer Overflow Vulnerability in AxRUploadServer.dll, Activex Method SetLogging/title/head body Dll name:AxRUploadServer.dll Download: http://www.imagestation.com/common/classes/SonyISUpload.cab?v=1,0,0,38 /br/br Description: This file belongs to...

Buffer overflow

Buffer overflow in the Sony AxRUploadServer.AxRUploadControl.1 ActiveX control in AxRUploadServer.dll 1.0.0.38 in SonyISUpload.cab 1.0.0.38 for Sony ImageStation allows remote attackers to execute arbitrary code via a long argument to the SetLogging method. NOTE: some of these details are obtaine...

CVE-2008-0748

Buffer overflow in the Sony AxRUploadServer.AxRUploadControl.1 ActiveX control in AxRUploadServer.dll 1.0.0.38 in SonyISUpload.cab 1.0.0.38 for Sony ImageStation allows remote attackers to execute arbitrary code via a long argument to the SetLogging method. NOTE: some of these details are obtaine...

CVE-2008-0748

Buffer overflow in the Sony AxRUploadServer.AxRUploadControl.1 ActiveX control in AxRUploadServer.dll 1.0.0.38 in SonyISUpload.cab 1.0.0.38 for Sony ImageStation allows remote attackers to execute arbitrary code via a long argument to the SetLogging method. NOTE: some of these details are obtaine...

CVE-2008-0748

The connected Nessus entry describes a concrete buffer overflow in Sony ImageStation’s AxRUploadServer.AxRUploadControl ActiveX (AxRUploadServer.dll) 1.0.0.38 used to upload photos. The vulnerability occurs when handling a long argument to the SetLogging method, allowing remote code execution if ...

Buffer Overflow Vulnerability in AxRUploadServer.dll, Activex Method (SetLogging)

Buffer Overflow in AxRUploadServer.dll, this file belongs to ImageStation that is a servicemark of Sony Electronics Inc. -------------- Access Violation at 0x42424242 The code: object classid='clsid:E9A7F56F-C40F-4928-8C6F-7A72F2A25222' id='bof'/object input language=VBScript onclick=Son...

Sony Imagestation ActiveX buffer overflow

Buffer overflow in SetLogging method...

ImageStation (SonyISUpload.cab 1.0.0.38) ActiveX BOF Exploit

Exploit for unknown platform in category remote exploits ============================================================ ImageStation SonyISUpload.cab 1.0.0.38 ActiveX BOF Exploit ============================================================ ImageStation SonyISUpload.cab 1.0.0.38 ActiveX Buffer...

imagestation-overflow.txt

Buffer Overflow Vulnerability in AxRUploadServer.dll, Activex Method SetLogging Dll name:AxRUploadServer.dll Download: http://www.imagestation.com/common/classes/SonyISUpload.cab?v=1,0,0,38 Description: This file belongs to ImageStation that is a servicemark of Sony Electronics Inc. Internal name...

ImageStation (SonyISUpload.cab 1.0.0.38) ActiveX Buffer Overflow PoC

Exploit for unknown platform in category dos / poc ==================================================================== ImageStation SonyISUpload.cab 1.0.0.38 ActiveX Buffer Overflow PoC ==================================================================== Buffer Overflow Vulnerability in...

ImageStation - SonyISUpload.cab 1.0.0.38 ActiveX Buffer Overflow (PoC)

ImageStation - SonyISUpload.cab 1.0.0.38 ActiveX Buffer Overflow PoC Buffer Overflow Vulnerability in AxRUploadServer.dll, Activex Method SetLogging Dll name:AxRUploadServer.dll Download: http://www.imagestation.com/common/classes/SonyISUpload.cab?v=1,0,0,38 Description: This file belongs to...

ImageStation - 'SonyISUpload.cab 1.0.0.38' ActiveX Buffer Overflow (PoC)

Buffer Overflow Vulnerability in AxRUploadServer.dll, Activex Method SetLogging Dll name:AxRUploadServer.dll Download: http://www.imagestation.com/common/classes/SonyISUpload.cab?v=1,0,0,38 Description: This file belongs to ImageStation that is a servicemark of Sony Electronics Inc. Internal name...

Unfixed XSS vulnerability at www.sony-ak.com

Security researcher S0m.Ph, has submitted on 25/01/2008 a cross-site-scripting XSS vulnerability affecting www.sony-ak.com, which at the time of submission ranked 346125 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 06/03/2008. It is currentl...

CVE-2007-5709

Stack-based buffer overflow in Sony SonicStage CONNECT Player CP 4.3 allows remote attackers to execute arbitrary code via a long file name in an M3U file...

Stack overflow

Stack-based buffer overflow in Sony SonicStage CONNECT Player CP 4.3 allows remote attackers to execute arbitrary code via a long file name in an M3U file...

CVE-2007-5709

CVE-2007-5709 affects Sony SonicStage CP (CONNECT Player) 4.3. A stack-based buffer overflow is triggered by a long file name in an M3U file, which can allow a remote attacker to execute arbitrary code. The vulnerability is a remote, unauthenticated condition over the network and is linked to buf...

CVE-2007-5709

Stack-based buffer overflow in Sony SonicStage CONNECT Player CP 4.3 allows remote attackers to execute arbitrary code via a long file name in an M3U file...