Searching motion software vulnerabilities

Heap-based buffer overflow in Research in Motio

Heap-based | Research | overflow | Motion | buffer |

Heap-based buffer overflow in Research in Motion (RIM) BlackBerry Attachment Service allows remote attackers to cause a denial of service (hang) via an e-mail attachment with a crafted TIFF file.


Research in Motion (RIM) BlackBerry Handheld we

Research | Motion |

Research in Motion (RIM) BlackBerry Handheld web browser for BlackBerry Handheld before 4.0.2 allows remote attackers to cause a denial of service (hang) via a Java Application Description (JAD) file with a long application name and vendor string, which prevents a browser dialog from being properly dismissed.


The BlackBerry Attachment Service in Research i

Attachment | BlackBerry | Research | Service | Motion |

The BlackBerry Attachment Service in Research in Motion (RIM) BlackBerry Enterprise Server (BES) 4.0 to version 4.0 Service Pack 2 allows attackers to cause a denial of service via a malformed Portable Network Graphics (PNG) file that triggers a heap-based buffer overflow.


Buffer overflow in the decompression algorithm

decompression | BlackBerry | Enterprise | algorithm | overflow | Research | earlier | before | Server | Buffer | Motion | SP1 |

Buffer overflow in the decompression algorithm in Research in Motion BlackBerry Enterprise Server 4.0 SP1 and earlier before Tuesday, June 07, 2005 might allow remote attackers to execute arbitrary code via certain data packets.


Buffer overflow in BlackBerry Attachment Servic

BlackBerry | Attachment | Research | overflow | Service | Motion | Buffer |

Buffer overflow in BlackBerry Attachment Service in Research in Motion (RIM) BlackBerry Enterprise Server 2.2 and 4.0 before SP3 Hotfix 4 for IBM Lotus Domino, 3.6 before SP7 and 5.0 before SP3 Hotfix 3 for Microsoft Exchangem, and 4.0 for Novell GroupWise before SP3 Hotfix 1 might allow user-assisted remote attackers to execute arbitrary code on the server via a crafted Microsoft Word document that is opened on a wireless device.


Multiple SQL injection vulnerabilities in Pixel

vulnerabilities | arbitrary | injection | attackers | commands | Multiple | execute | remote | Motion | Pixel | allow | Blog | via | SQL |

Multiple SQL injection vulnerabilities in Pixel Motion Blog allow remote attackers to execute arbitrary SQL commands via the (1) date parameter in index.php or bypass authentication via the (2) password parameter in admin/index.php.


Cross-site scripting (XSS) vulnerability in Def

Cross-site | scripting |

Cross-site scripting (XSS) vulnerability in Default.aspx in Perpetual Motion Interactive Systems DotNetNuke before 3.3.5, and 4.x before 4.3.5, allows remote attackers to inject arbitrary HTML via the error parameter.


Static code injection vulnerability in config.p

vulnerability | configphp | injection | Motion | Static | Pixel | code | Blog |

Static code injection vulnerability in config.php in Blog Pixel Motion 2.1.1 allows remote attackers to execute arbitrary PHP code via the nom_blog parameter, which is injected into include/variables.php.


Blog Pixel Motion 2.1.1 allows remote attackers

Motion | Pixel | Blog |

Blog Pixel Motion 2.1.1 allows remote attackers to change the username and password for the admin user via a direct request to insere_base.php with modified (1) login and (2) pass parameters. NOTE: this issue was claimed to be SQL injection by the original researcher, but it is not.


Research in Motion (RIM) BlackBerry Enterprise

Research | Motion |

Research in Motion (RIM) BlackBerry Enterprise Server 4.1 SP2 before Hotfix 1 for IBM Lotus Domino might allow attackers with meeting organizer privileges to cause a denial of service (application hang) via a deleted recurrent meeting instance when changing the attendee's calendar meeting time.


Buffer overflow in the SetLanguage function in

SetLanguage | function | Research | overflow | Motion | Buffer |

Buffer overflow in the SetLanguage function in Research In Motion (RIM) TeamOn Import Object ActiveX control (TOImport.dll) allows remote attackers to execute arbitrary code via unspecified vectors.


Stack-based buffer overflow in the Vivotek Moti

Stack-based | overflow | ActiveX | control | Vivotek | buffer | Motion | Jpeg |

Stack-based buffer overflow in the Vivotek Motion Jpeg ActiveX control (aka MjpegControl) in MjpegDecoder.dll 2.0.0.13 allows remote attackers to execute arbitrary code via a long PtzUrl property value.


Format string vulnerability on the Research in

vulnerability | BlackBerry | Research | string | Motion | Format |

Format string vulnerability on the Research in Motion BlackBerry 7270 before 4.0 SP1 Bundle 108 allows remote attackers to cause a denial of service (blocked call reception and calling) via format string specifiers in an SIP INVITE message that lacks a host name in the Contact header.


The Research in Motion BlackBerry 7270 before 4

BlackBerry | Research | Motion |

The Research in Motion BlackBerry 7270 before 4.0 SP1 Bundle 108 does not properly manage transaction states, which allows remote attackers to cause a denial of service (temporary device hang) by sending a certain SIP INVITE message, but not providing an ACK when the call is answered.


The Research in Motion BlackBerry 7270 with 4.0

BlackBerry | Research | Motion |

The Research in Motion BlackBerry 7270 with 4.0 SP1 Bundle 83 allows remote attackers to cause a denial of service (blocked call reception) via a malformed SIP invite message, possibly related to multiple format string specifiers in the From field, a spoofed source IP address, and limitations of the function stack frame.


Research in Motion BlackBerry Enterprise Server

configuration | applications | installation | third-party | facilitate | Enterprise | BlackBerry | arbitrary | Research | malware | devices | loading | through | default | permits | Server | Motion | which | might | has |

Research in Motion BlackBerry Enterprise Server 4.0 through 4.1 has a default configuration that permits installation of arbitrary third-party applications on BlackBerry devices, which might facilitate loading of malware.


Software vulnerabilities results 1 to 17 of 17     
Page: 1