Gabriel Menezes Nunes

**Name of the Vulnerable Software and Affected Versions** Sony Bravia TV KDL-32CX525 **Description** The issue allows remote attackers to cause a denial of service, resulting in a configuration outage or device crash, via a flood of TCP SYN packets. This can be demonstrated using tools like hping. **Recommendations** For Sony Bravia TV KDL-32CX525, consider implementing network traffic filtering to limit the impact of TCP SYN packet floods as a temporary workaround until a patch is available.

**Name of the Vulnerable Software and Affected Versions** aMSN versions 0.98.3 and earlier **Description** The issue allows man-in-the-middle attackers to spoof an MSN server via an arbitrary certificate when SSL is used, because the software does not verify that the server hostname matches a domain name in the subject's Common Name (CN) field or a Subject Alternative Name field of the X.509 certificate. **Recommendations** For versions 0.98.3 and earlier, update to a version that verifies the server hostname matches a domain name in the subject's Common Name (CN) field or a Subject Alternative Name field of the X.509 certificate to prevent man-in-the-middle attacks.