HTC Touch vCard over IP Denial of Service PoC Code

Hello, PoC code for testing the MSL-2008-002 vulnerability HTC Touch vCard over IP Denial of Service is now available at: http://poc.mseclab.com/pocs/MSL-2008-002-PoC.py The code provide means for demonstrating the HTC Touch vCard over IP DoS by sending vCards to port UDP/9204 of the target IP...

HTC Touch DoS

vCard files are accepted and imported without user intervation...

HTC Touch - vCard over IP Denial of Service

HTC Touch - vCard over IP Denial of Service ! /usr/bin/env python Copyright c 2009 Mobile Security Lab www.mseclab.com Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files the "Software", to deal in the Software without...

HTC Touch vCard over IP Denial of Service PoC Code

No description provided by source. ! /usr/bin/env python Copyright c 2009 Mobile Security Lab www.mseclab.com Permission is hereby granted, free of charge, to any person obtaining a copy of this software and associated documentation files the "Software", to deal in the Software without restrictio...

Design/Logic Flaw

Safari in Apple iPhone OS 2.0 through 2.1 and iPhone OS for iPod touch 2.1 through 2.1 does not restrict an IFRAME's content display to the boundaries of the IFRAME, which allows remote attackers to spoof a user interface via a crafted HTML document...

Code injection

ImageIO in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 allow remote attackers to cause a denial of service memory consumption and device reset via a crafted TIFF image...

Memory corruption

Safari in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 does not properly handle HTML TABLE elements, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted HTML document...

Race condition

Race condition in the Passcode Lock feature in Apple iPhone OS 2.0 through 2.1 and iPhone OS for iPod touch 2.0 through 2.1 allows physically proximate attackers to remove the lock and launch arbitrary applications by restoring the device from a backup...

CVE-2008-4227

Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 changes the encryption level of PPTP VPN connections to a lower level than was previously used, which makes it easier for remote attackers to obtain sensitive information or hijack a connection by decrypting network...

Design/Logic Flaw

Safari in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 does not isolate the call-approval dialog from the process of launching new applications, which allows remote attackers to make arbitrary phone calls via a crafted HTML document...

Design/Logic Flaw

The Passcode Lock feature in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 displays SMS messages when the emergency-call screen is visible, which allows physically proximate attackers to obtain sensitive information by reading these messages. NOTE: this might be a...

CVE-2008-4232

Safari in Apple iPhone OS 2.0 through 2.1 and iPhone OS for iPod touch 2.1 through 2.1 does not restrict an IFRAME's content display to the boundaries of the IFRAME, which allows remote attackers to spoof a user interface via a crafted HTML document...

CVE-2008-4228

The CVE-2008-4228 issue affects Apple iPhone OS versions 1.0–2.1 and iPhone OS for iPod touch 1.1–2.1. A design/logic flaw in the Passcode Lock feature lets physically proximate attackers exploit the device’s Emergency Call ability to place a call to an arbitrary number while the device is locked...

CVE-2008-4232

Safari in Apple iPhone OS 2.0–2.1 and iPhone OS for iPod touch 2.1 suffer an IFRAME boundary enforcement flaw: an IFRAME can display content beyond its boundaries, enabling remote UI spoofing via crafted HTML. The affected components are Safari on iPhone OS 2.x and iPod touch OS 2.x; root cause i...

CVE-2008-4231

The CVE-2008-4231 entry describes a memory corruption/remote code execution vulnerability in Apple Safari on iPhone OS 1.0–2.1 and iPhone OS for iPod touch 1.1–2.1, caused by improper handling of HTML TABLE elements in crafted HTML documents. This allows remote attackers to execute arbitrary code...

CVE-2008-4231

Safari in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 does not properly handle HTML TABLE elements, which allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted HTML document...

CVE-2008-4227

Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 changes the encryption level of PPTP VPN connections to a lower level than was previously used, which makes it easier for remote attackers to obtain sensitive information or hijack a connection by decrypting network...

CVE-2008-1586

ImageIO in Apple iPhone OS 1.0 through 2.1 and iPhone OS for iPod touch 1.1 through 2.1 allow remote attackers to cause a denial of service memory consumption and device reset via a crafted TIFF image...

CVE-2008-1586

The CVE-2008-1586 issue affects ImageIO in Apple iPhone OS 1.0–2.1 and iPhone OS for iPod touch 1.1–2.1, where remote attackers can trigger denial of service via a crafted TIFF image. The core risk is memory consumption leading to a device reset. Connected sources also reference libtiff-related a...

CVE-2008-4227

Apple iPhone OS 1.0–2.1 and iPhone OS for iPod touch 1.1–2.1 change the PPTP VPN encryption level to a lower one, making it easier for remote attackers to decrypt traffic or hijack connections. Affected software: Apple iPhone OS 1.0–2.1 and iPod touch OS 1.1–2.1. Root cause: reduction in PPTP enc...