CVE-2012-4880
https://notcve.org/view.php?id=CVE-2012-4880
Multiple untrusted search path vulnerabilities in DVD Architect Pro 5.2 Build 133 and DVD Architect Studio 5.0 Build 156 allow local users to gain privileges via a Trojan horse (1) enc_mp2v.200 or (2) CFHDDecoder.dll file in the current working directory, as demonstrated by a directory that contains a .dar file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Múltiples vulnerabilidades de ruta de búsqueda no confiable en DVD Architect Pro v5.2 Build 133 y DVD Architect Studio v5.0 Build 156, permite a usuarios locales ganar privilegios a través de un archivo (1) enc_mp2v.200 or (2) CFHDDecoder.dll caballo de troya que se encuentre en el mismo directorio de trabajo, como se demostró con un directorio que contiene un archivo .dar. NOTA: el origen de esta información es desconocida, los datos se obtienen exclusivamente a partir de información de terceros. • http://secunia.com/advisories/47282 •
CVE-2012-4881
https://notcve.org/view.php?id=CVE-2012-4881
Untrusted search path vulnerability in moviEZ HD 1.0 Build 2554-29894-A allows local users to gain privileges via a Trojan horse avrt.dll file in the current working directory, as demonstrated by a directory that contains a .mvz file. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information. Vulnerabilidad no confiable en la ruta de búsqueda en Moviez HD 1.0 Build 2554-29894-A permite a usuarios locales obtener privilegios a través de un archivo troyano avrt.dll caballo en el directorio de trabajo actual, como lo demuestra un directorio que contiene un archivo. MVZ. NOTA: el origen de esta información es desconocida, los datos se obtienen exclusivamente a partir de información de terceros. • http://secunia.com/advisories/47284 •
CVE-2012-0985 – Sony VAIO Wireless Manager 4.0.0.0 - Buffer Overflow
https://notcve.org/view.php?id=CVE-2012-0985
Multiple buffer overflows in the Wireless Manager ActiveX control 4.0.0.0 in WifiMan.dll in Sony VAIO PC Wireless LAN Wizard 1.0; VAIO Wireless Wizard 1.00, 1.00_64, 1.0.1, 2.0, and 3.0; SmartWi Connection Utility 4.7, 4.7.4, 4.8, 4.9, 4.10, and 4.11; and VAIO Easy Connect software 1.0.0 and 1.1.0 allow remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via a long string in the second argument of the (1) SetTmpProfileOption or (2) ConnectToNetwork method. Múltiples desbordamientos de búfer en el control ActiveX de Wireless Manager v4.0.0.0 en WifiMan.dll en Sony VAIO PC Wireless LAN Wizard v1.0, VAIO Wireless Wizard v1.00, v1.00_64, v1.0.1, v2.0 y v3.0; SmartWi Connection Utility v4.7, v4.7.4, v4.8, v4.9, v4.10 y v4.11 y el software VAIO Easy Connect v1.0.0 y v1.1.0 permite a atacantes remotos causar una denegación de servicio (caída) y posiblemente ejecutar código de su elección a través de una cadena larga en el segundo argumento de los metodos (1) SetTmpProfileOption o (2) ConnectToNetwork. Wireless Manager Sony VAIO version 4.0.0.0 suffers from multiple buffer overflow vulnerabilities. • https://www.exploit-db.com/exploits/18958 http://archives.neohapsis.com/archives/bugtraq/2012-05/0147.html http://esupport.sony.com/US/perl/support-info.pl?template_id=1&info_id=946 http://osvdb.org/82401 http://secunia.com/advisories/49340 http://www.exploit-db.com/exploits/18958 http://www.securityfocus.com/bid/53735 https://exchange.xforce.ibmcloud.com/vulnerabilities/75978 • CWE-119: Improper Restriction of Operations within the Bounds of a Memory Buffer •
CVE-2012-2210 – Sony Bravia - Remote Denial of Service
https://notcve.org/view.php?id=CVE-2012-2210
The Sony Bravia TV KDL-32CX525 allows remote attackers to cause a denial of service (configuration outage or device crash) via a flood of TCP SYN packets, as demonstrated by hping, a related issue to CVE-1999-0116. Sony Bravia TV KDL-32CX525 permite a atacantes remotos provocar una denegación de servicio (error en la configuración o caída del dispositivo) a través del envío de numerosos paquetes TCP SYN, tal como se ha demostrado por hping, un problema relacionado con CVE-1999-0116. Sony Bravia TV suffers from a denial of service vulnerability when flooded with datagrams. • https://www.exploit-db.com/exploits/18705 http://archives.neohapsis.com/archives/bugtraq/2012-04/0043.html http://osvdb.org/80957 http://secunia.com/advisories/48705 http://www.exploit-db.com/exploits/18705 http://www.securitytracker.com/id?1026891 https://exchange.xforce.ibmcloud.com/vulnerabilities/74644 • CWE-399: Resource Management Errors •
CVE-2009-2541
https://notcve.org/view.php?id=CVE-2009-2541
The web browser on the Sony PLAYSTATION 3 (PS3) allows remote attackers to cause a denial of service (memory consumption and console hang) via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692. El navegador web en Sony PLAYSTATION 3 (PS3) permite a atacantes remotos provocar una denegación de servicio (consumo de memoria y colgado de la consola) mediante un valor entero grande en la propiedad "length" de un objeto "Select", siendo un asunto relacionado con CVE-2009-1692. • http://www.exploit-db.com/exploits/9160 http://www.g-sec.lu/one-bug-to-rule-them-all.html http://www.securityfocus.com/archive/1/504969/100/0/threaded http://www.securityfocus.com/archive/1/504988/100/0/threaded http://www.securityfocus.com/archive/1/504989/100/0/threaded http://www.securityfocus.com/archive/1/505006/100/0/threaded https://exchange.xforce.ibmcloud.com/vulnerabilities/52875 • CWE-399: Resource Management Errors •