CVE

Id
37629  
CVE No.
CVE-2009-0194  
Status
Candidate  
Description
The domain-locking implementation in the GARMINAXCONTROL.GarminAxControl_t.1 ActiveX control in npGarmin.dll in the Garmin Communicator Plug-In 2.6.4.0 does not properly enforce the restrictions that (1) download and (2) upload requests come from a web site specified by the user, which allows remote attackers to obtain sensitive information or reconfigure Garmin GPS devices via unspecified vectors related to a "synchronisation error."  
Phase
Assigned (20090120)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
408568 37629 CVE-2009-0194 BUGTRAQ:20090507 Secunia Research: Garmin Communicator Plug-In Domain Locking Security Bypass  View
408569 37629 CVE-2009-0194 URL:http://www.securityfocus.com/archive/1/archive/1/503319/100/0/threaded  View
408570 37629 CVE-2009-0194 MISC:http://secunia.com/secunia_research/2009-16/  View
408571 37629 CVE-2009-0194 BID:34858  View
408572 37629 CVE-2009-0194 URL:http://www.securityfocus.com/bid/34858  View
408573 37629 CVE-2009-0194 OSVDB:54258  View
408574 37629 CVE-2009-0194 URL:http://osvdb.org/54258  View
408575 37629 CVE-2009-0194 SECTRACK:1022173  View
408576 37629 CVE-2009-0194 URL:http://securitytracker.com/id?1022173  View
408577 37629 CVE-2009-0194 SECUNIA:34326  View
408578 37629 CVE-2009-0194 URL:http://secunia.com/advisories/34326  View
408579 37629 CVE-2009-0194 XF:communicator-domain-security-bypass(50360)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
40801 JVNDB-2009-001807 Adobe Reader の JBIG2 フィルタにおけるヒープベースのバッファオーバーフローの脆弱性 Adobe Reader の JBIG2 フィルタには、PDF ファイルの処理に不備があるため、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2009-0198 37629 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001807.html  View