Changes

260 bytes added ,  04:46, 20 August 2021
→‎System Menu: added HTTP update bug
Line 213: Line 213:  
!  Discovered
 
!  Discovered
 
!  Discovered by
 
!  Discovered by
 +
|-
 +
| Update downloader uses HTTP
 +
| The System Menu uses HTTP requests to download updates. By adding a MITM, it becomes possible to analyze and/or intercept the requests.
 +
| Tampering with update downloads
 +
| [[2.2]]
 +
| {{SortableMonth|Nov|2006}}
 +
| {{User|roto}}
 
|-
 
|-
 
| Buffer overflow in mail parser {{Anchor|menu-letterbomb}}
 
| Buffer overflow in mail parser {{Anchor|menu-letterbomb}}
5,579

edits