Andres Blanco

**Nome do software vulnerável e versões afetadas: Câmera IP FOSCAM FI8620 (versões afetadas não especificadas) Descrição: Existe uma falha devido a restrições de acesso insuficientes nos diretórios `/tmpfs/` e `/log/`, o que poderia permitir que um usuário mal-intencionado obtivesse informações confidenciais. Recomendações: No momento, não há informações sobre uma versão mais recente que contenha uma correção para essa vulnerabilidade.

Name of the Vulnerable Software and Affected Versions: Android versions prior to 5.0.1 Android versions prior to 5.0.2 Android 4.4.4 Android 4.2.2 Android 4.1.2 Description: The issue allows remote attackers to cause a denial of service, resulting in a device reboot, via a crafted 802.11 probe response frame. This is due to improper exception handling in WiFiMonitor. Recommendations: For Android 4.4.4, update to a version newer than 5.0.1 to resolve the issue. For Android 4.2.2, update to a version newer than 5.0.1 to resolve the issue. For Android 4.1.2, update to a version newer than 5.0.1 to resolve the issue. For versions prior to 5.0.1 and 5.0.2, update to version 5.0.1 or newer to resolve the issue.

The issue is related to a buffer overflow in the ubnt-streamer RTSP service. This occurs when a long rtsp: URI is sent in a DESCRIBE request, allowing remote attackers to execute arbitrary code.

The issue allows remote attackers to cause a denial of service, resulting in an out-of-bounds read and Wi-Fi outage, via an RSN 802.11i information element.

The issue arises from improper validation of certain parameters to hooked System Service Descriptor Table (SSDT) functions. This can be exploited by local users to cause a denial of service, resulting in a system crash. The exploitation vectors include a crafted `OBJECT ATTRIBUTES` structure in a call to the `NtDeleteFile` function, leading to improper validation of a `ZwQueryObject` result, as well as unspecified calls to the `NtCreateFile` and `NtSetThreadContext` functions.