HPSBMI02573 SSRT100227 rev.1 - Palm webOS, webOS Doc Viewer, Execution of Arbitrary Code

Potential Security Impact Execution of arbitrary code VULNERABILITY SUMMARY A potential security vulnerability has been identified with Palm webOS Doc Viewer. This vulnerability could be exploited to execute arbitrary code. RESOLUTION The vulnerability can be resolved by updating affected devices...

Palm Pwned: Researchers Hack WebOS With Text Messages

Security researchers at the Intrepidus Group have hacked into Palm’s new WebOS platform, using nothing more than text messages to exploit a slew of dangerous web app vulnerabilities. Hackers at the security consulting firm found that the WebOS SMS client did not properly validate input/output...

Palm Pre WebOS 1.1 DoS

No description provided by source. I. Description The Palm Pre WebOS version = 1.1 suffers from a floating point exception vulnerability when attempting to view a specially crafted web page. This vulnerability has been addressed in the latest patch from Palm and all users are recommended to updat...

Palm Pre WebOS 1.1 - Denial of Service

I. Description The Palm Pre WebOS version AAAAA..." using 50280 or more characters after the refresh. IV. About This vulnerability was discovered by Townsend Ladd Harris Vulnerability details will be posted at: http://tlhsecurity.blogspot.com/2009/10/palm-pre-webos-version-11-floating.html...

Palm Pre WebOS 1.1 DoS

Exploit for unknown platform in category dos / poc ====================== Palm Pre WebOS 1.1 DoS ====================== Title: Palm Pre WebOS 1.1 DoS CVE-ID: OSVDB-ID: Author: Townsend Harris Published: 2009-10-14 view source print? I. Description The Palm Pre WebOS version AAAAA..." usin...

Palm Pre WebOS 1.1 Denial Of Service

I. Description The Palm Pre WebOS version AAAAA..." using 50280 or more characters after the refresh. IV. About This vulnerability was discovered by Townsend Ladd Harris Vulnerability details will be posted at: http://tlhsecurity.blogspot.com/2009/10/palm-pre-webos-ve...

Palm WebOS 'LunaSysMgr'服务拒绝服务漏洞

Bugraq ID: 36659 Palm webOS是一款基于移动设备的WEB OS操作系统。 Palm webOS当解析特殊构建的WEB页时会触发浮点数异常，攻击者可以利用漏洞使应用程序崩溃。 当打开包含50,280字节数据的WEB页时，"LunaSysMgr"进程会崩溃，可导致电话重新启动。造成拒绝服务攻击。 Palm webOS 1.1 Palm webOS 1.0.4 Palm webOS 1.0.3 厂商解决方案: Palm WebOS 1.2已经修复此漏洞： http://palmwebos.org/ "meta http-equiv="refresh"...

Palm Pre WebOS 1.1 - Denial of Service

Palm Pre WebOS 1.1 - Denial of Service I. Description The Palm Pre WebOS version AAAAA..." using 50280 or more characters after the refresh. IV. About This vulnerability was discovered by Townsend Ladd Harris Vulnerability details will be posted at:...

Palm Pre WebOS version <= 1.1 Floating Point Exception

I. Description The Palm Pre WebOS version = 1.1 suffers from a floating point exception vulnerability when attempting to view a specially crafted web page. This vulnerability has been addressed in the latest patch from Palm and all users are recommended to update to WebOS version 1.2+. II. Impact...

Palm WebOS 1.0/1.1 - 'LunaSysMgr' Service Denial of Service

source: https://www.securityfocus.com/bid/36659/info Palm WebOS is prone to a remote denial-of-service vulnerability because it fails to properly validate user-supplied data. Attackers can leverage this issue to cause an affected device to reboot. Given the nature of this issue, attackers may als...

Palm WebOS 1.01.1 - LunaSysMgr Service Denial of Service

Palm WebOS 1.01.1 - LunaSysMgr Service Denial of Service source: https://www.securityfocus.com/bid/36659/info Palm WebOS is prone to a remote denial-of-service vulnerability because it fails to properly validate user-supplied data. Attackers can leverage this issue to cause an affected device to...

Palm Pre WebOS <=1.1 Remote File Access Vulnerability

I. Description The Palm Pre WebOS =1.1 suffers from a JavaScript injection attack that allows a malicious attacker to access any file on the mobile device. Palm has patched this vulnerability and all users are recommended to upgrade to WebOS version 1.2+. Palm WebOS 1.2 patch information can be...

Palm Pre WebOS <=1.1 Remote File Access Vulnerability

I. Description The Palm Pre WebOS =1.1 suffers from a JavaScript injection attack that allows a malicious attacker to access any file on the mobile device. Palm has patched this vulnerability and all users are recommended to upgrade to WebOS version 1.2+. Palm WebOS 1.2 patch information can be...

Palm Pre WebOS 1.1 - Remote File Access

I. Description The Palm Pre WebOS =1.1 suffers from a JavaScript injection attack that allows a malicious attacker to access any file on the mobile device. Palm has patched this vulnerability and all users are recommended to upgrade to WebOS version 1.2+. Palm WebOS 1.2 patch information can be...

Palm WebOS 1.01.1 - Email Arbitrary Script Injection

Palm WebOS 1.01.1 - Email Arbitrary Script Injection source: https://www.securityfocus.com/bid/36592/info Palm WebOS is prone to an arbitrary-script-injection vulnerability because the integrated email application fails to properly sanitize user-supplied input. An attacker can exploit this issue ...

Palm Pre WebOS 1.1 - Remote File Access

Palm Pre WebOS 1.1 - Remote File Access I. Description The Palm Pre WebOS =1.1 suffers from a JavaScript injection attack that allows a malicious attacker to access any file on the mobile device. Palm has patched this vulnerability and all users are recommended to upgrade to WebOS version 1.2+...

Palm Pre WebOS <=1.1 Remote File Access Vulnerability

No description provided by source. I. Description The Palm Pre WebOS =1.1 suffers from a JavaScript injection attack that allows a malicious attacker to access any file on the mobile device. Palm has patched this vulnerability and all users are recommended to upgrade to WebOS version 1.2+. Palm...

Palm Pre WebOS <=1.1 Remote File Access Vulnerability

Exploit for unknown platform in category remote exploits ===================================================== Palm Pre WebOS =1.1 Remote File Access Vulnerability ===================================================== Title: Palm Pre WebOS =1.1 Remote File Access Vulnerability CVE-ID: OSVDB-ID:...

Palm WebOS 1.0/1.1 - Email Arbitrary Script Injection

source: https://www.securityfocus.com/bid/36592/info Palm WebOS is prone to an arbitrary-script-injection vulnerability because the integrated email application fails to properly sanitize user-supplied input. An attacker can exploit this issue to execute arbitrary script code. Successful exploits...

Palm Pre WebOS 1.0.4 Remote execution of arbitrary HTML code vulnerability

I. Description The Palm Pre WebOS version 1.0.4 and below allows a remote attacker to execute arbitrary HTML code on the phone via certain applications. The affected applications involve the native email client via the notifications system as well as the native calendar application. The vendor ha...