Jduck

The web server has a buffer overflow via a long password in an administration login POST request, leading to arbitrary code execution. This issue can be exploited through an EIP-overwrite buffer overflow.

The issue allows remote attackers to cause a denial of service, resulting in a device hang or reboot, via a crafted file.

The issue is related to the `SMSDispatcher.java` in Telephony, which does not properly construct warnings about premium SMS messages. This allows attackers to spoof the premium-payment confirmation dialog via a crafted application.

The issue is related to an integer overflow in the `SampleTable::setSampleToChunkParams` function in `libstagefright` in Android. This allows remote attackers to execute arbitrary code via crafted atoms in MP4 data that trigger an unchecked multiplication. The vulnerability can be exploited to remotely execute code in affected devices.

The issue allows remote attackers to bypass authentication and execute arbitrary commands. This is achieved by sending a NET CMD ID MANU CMD packet to UDP port 9999, due to improper checking of the MAC address for a request.

The issue affects the confidentiality, integrity, and availability of systems due to an unspecified vulnerability in the Deployment component. This allows remote untrusted Java Web Start applications and untrusted Java applets to exploit the vulnerability via unknown vectors.

The issue is related to a stack-based buffer overflow in the doLoad function in snmpviewer.exe, allowing remote attackers to execute arbitrary code. This is achieved via the `act` and `app` parameters.

The issue allows remote attackers to execute arbitrary programs. This is achieved by setting a `SceneURL` property value to a URL for a .exe file, which enables the execution of arbitrary programs.