Sun Solaris UFS file system driver DoS
Published:		27.09.2005
Source:		SECUNIA
SecurityVulns ID:		5261
Type:		local
Level:		5/10
Description:		It's possible to cause "soft hang" if UFS logging is enabled.

Affected:		SUN : Solaris 8
		SUN : Solaris 9

Original document

SECUNIA, [SA16924] SUN Solaris UFS File System Denial of Service (27.09.2005)

Discuss:

Read or add your comments to this news (0 comments)

Sony PlayStation Portable buffer overflow
Published:		27.09.2005
Source:		BUGTRAQ
SecurityVulns ID:		5266
Type:		client
Level:		5/10
Description:		Buffer overflow on TIFF files parsing.

Affected:

SONY : PSP 2.0

Original document

SECUNIA, [SA16922] Sony PSP Photo Viewer TIFF File Handling Buffer Overflow (27.09.2005)

Discuss:

Read or add your comments to this news (0 comments)

Multiple MacOS X vulnerabilites
Published:		27.09.2005
Source:		SECUNIA
SecurityVulns ID:		5264
Type:		library
Level:		8/10
Description:		ImageIO GIF files parsing buffer overflow, Mail.app information leakage, QuickDraw Manager PICT files parsing buffer overflow, Java virtual machine quick time extensions safe mode protection bypass, Safari crossite scripting.

Affected:		APPLE : MacOS X 10.3
		APPLE : Mac OS X 10.4

Original document

SECUNIA, [SA16920] Mac OS X Security Update Fixes Multiple Vulnerabilities (27.09.2005)

Discuss:

Read or add your comments to this news (0 comments)

RSyslog SQL injection
Published:		27.09.2005
Source:		SECUNIA
SecurityVulns ID:		5267
Type:		remote
Level:		5/10
Description:		SQL injection on syslog message.

Affected:		RSYSLOG : RSyslog 1.0
		RSYSLOG : RSyslog 1.10

Original document

SECUNIA, [SA16947] RSyslog Syslog Message SQL Injection Vulnerability (27.09.2005)

Discuss:

Read or add your comments to this news (0 comments)

Bluetooth headset hijacking
Published:		27.09.2005
Source:		BUGTRAQ
SecurityVulns ID:		5268
Type:		remote
Level:		6/10
Description:		It's possible to pair headset with RFCOMM connection even if headset is not in pairing mode.

Affected:		PLANTRONICS : M2500
		ANYCOM : Blue Stereo Headset BSH-100

Original document

Kevin Finisterre, Hijacking Bluetooth Headsets for Fun and Profit? (27.09.2005)

Discuss:

Read or add your comments to this news (0 comments)

FL Studio music sequencer buffer overflow
Published:		27.09.2005
Source:		BUGTRAQ
SecurityVulns ID:		5262
Type:		local
Level:		5/10
Description:		Buffer overflow on parsing .flp files.

Affected:

FLSTUDIO : Fl Studio 5.0

Original document

varunuppal_(at)_linuxmail.org, FL Studio 5 (.flp file processing) Heap Overflow (27.09.2005)

Discuss:

Read or add your comments to this news (0 comments)

Nokia smartphones Nobex service DoS
Published:		27.09.2005
Source:		BUGTRAQ
SecurityVulns ID:		5263
Type:		remote
Level:		3/10
Description:		Server stops responding after receiving archive with special characters in the filename.

Affected:		NOKIA : Nokia 7610
		NOKIA : Nokia 3210

Original document

A. Ramos, [Full-disclosure] Nokia 7610, 3210 denial of service in OBEX. (27.09.2005)

Discuss:

Read or add your comments to this news (0 comments)

Helix Player / Real Player format string bug updated since 27.09.2005
Published:		30.09.2005
Source:		SECURITEAM
SecurityVulns ID:		5265
Type:		client
Level:		6/10
Description:		Format string bugs on .rt / .rp files parsing.

Affected:		REAL : RealPlayer 10
		HELIXCOMMUNITY : Helix Player 1.0

Original document		IDEFENSE, [Full-disclosure] iDEFENSE Security Advisory 09.30.05: RealNetworks RealPlayer/HelixPlayer RealPix Format String Vulnerability (30.09.2005)
		SECURITEAM, [NEWS] HelixPlayer Based Players Format String (27.09.2005)

Files:		Remote format string exploit POC for UNIX RealPlayer && HelixPlayer
Discuss:		Read or add your comments to this news (0 comments)