Google Android Qualcomm closed-source component integer overflow vulnerability (CNVD-2019-24146)

Android is a Linux-based open source operating system from Google and the Open Handheld Alliance OHA. An integer overflow vulnerability exists in the Qualcomm closed source component in Android. An attacker can exploit this vulnerability to integer overflow untrusted fields in GNSS XTRA3...

xtra-proxy.eu XSS vulnerability

Open Bug Bounty ID: OBB-277650 Description| Value ---|--- Affected Website:| xtra-proxy.eu Open Bug Bounty Program:| Create your bounty program now. It's open and free. Vulnerable Application:| Custom Code Vulnerability Type:| XSS Cross Site Scripting / CWE-79 CVSSv3 Score:| 6.1...

The vulnerability of the GPS component of the Android operating system allows a intruder to trigger a service failure (suspension of GPS signal detection).

The vulnerability of the Android operating system’s GPS component is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to cause a service failure a suspension of GPS signal detection, by using incorrect xtra.bin or xtra2.bin files on the Qualcomm...

Android GPS Component Denial of Service Vulnerability (CNVD-2016-12023)

Android is a Linux-based open source operating system jointly developed by Google and the Open Handheld Alliance OHA, with GPS as one of the global positioning components. A denial-of-service vulnerability exists in the GPS component in versions of Android prior to 2016-12-05, which stems from th...

CVE-2016-5341

The GPS component in Android before 2016-12-05 allows man-in-the-middle attackers to cause a denial of service GPS signal-acquisition delay via an incorrect xtra.bin or xtra2.bin file on a spoofed Qualcomm gpsonextra.net or izatcloud.net host, aka internal bug 31470303 and external bug 211602 and...

Google Android - gpsOneXtra Data Files Denial of Service

Google Android - gpsOneXtra Data Files Denial of Service Original at: https://wwws.nightwatchcybersecurity.com/2016/10/04/advisory-cve-2016-5348-2/ Summary Android devices can be crashed remotely forcing a halt and then a soft reboot by a MITM attacker manipulating assisted GPS/GNSS data provided...

Google Android - 'gpsOneXtra' Data Files Denial of Service

Original at: https://wwws.nightwatchcybersecurity.com/2016/10/04/advisory-cve-2016-5348-2/ Summary Android devices can be crashed remotely forcing a halt and then a soft reboot by a MITM attacker manipulating assisted GPS/GNSS data provided by Qualcomm. This issue affects the open source code in...

Android Qualcomm GPS/GNSS Man-In-The-Middle

Exploit for Android platform in category local exploits Summary Android devices can be crashed remotely forcing a halt and then a soft reboot by a MITM attacker manipulating assisted GPS/GNSS data provided by Qualcomm. This issue affects the open source code in AOSP and proprietary code in a Java...

CVE-2016-5348

The GPS component in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allows man-in-the-middle attackers to cause a denial of service memory consumption, and device hang or reboot via a large xtra.bin or xtra2.bin file on a spoofed...

UBUNTU-CVE-2016-5348

The GPS component in Android 4.x before 4.4.4, 5.0.x before 5.0.2, 5.1.x before 5.1.1, 6.x before 2016-10-01, and 7.0 before 2016-10-01 allows man-in-the-middle attackers to cause a denial of service memory consumption, and device hang or reboot via a large xtra.bin or xtra2.bin file on a spoofed...

Android Qualcomm GPS/GNSS Man-In-The-Middle

Original at: https://wwws.nightwatchcybersecurity.com/2016/10/04/advisory-cve-2016-5348-2/ Summary Android devices can be crashed remotely forcing a halt and then a soft reboot by a MITM attacker manipulating assisted GPS/GNSS data provided by Qualcomm. This issue affects the open source code in...

NS Reisplanner Xtra - Customized SSL, Dangerous filesystem permissions, Redefined SSL Common Names verifier vulnerabilities

HackApp vulnerability scanner discovered that application NS Reisplanner Xtra published at the 'play' market has multiple vulnerabilities...

Adobe Shockwave Player Multiple Vulnerabilities Jan-2013 (Mac OS X)

This host is installed with Adobe Shockwave Player and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbadobeshockwaveplayermultvulnjan13macosx.nasl 6093 2017-05-10 09:03:18Z teissa $ Adobe Shockwave Player Multiple Vulnerabilities Jan-2013 Mac OS X Authors: Rachana Shetty...

Design/Logic Flaw

Adobe Shockwave Player through 11.6.8.638 allows remote attackers to trigger installation of arbitrary signed Xtras via a Shockwave movie that contains an Xtra URL, as demonstrated by a URL for an outdated Xtra...

Input validation

The FLV ASSET Xtra component in Adobe Shockwave Player before 11.6.0.626 allows attackers to execute arbitrary code via unspecified vectors, related to an "input validation vulnerability."...

CVE-2011-2118

Adobe Shockwave Player is affected by CVE-2011-2118 due to an input-validation vulnerability in the FLV Asset Xtra component, prior to version 11.6.0.626. This vulnerability enables arbitrary code execution. Multiple connected advisories confirm the issue and reference the targeted Shockwave comp...