Wireshark Denial of Service and Code Execution Vulnerabilities-01 (Mar 2014) - Windows

Wireshark is prone to denial of service DoS and remote code execution RCE vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE ...

CVE-2014-2299

Buffer overflow in the mpegread function in wiretap/mpeg.c in the MPEG parser in Wireshark 1.8.x before 1.8.13 and 1.10.x before 1.10.6 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a large record in MPEG data...

CVE-2014-2299

CVE-2014-2299 is a buffer overflow in Wireshark’s MPEG file parser (wiretap/mpeg.c, function mpeg_read). The issue affects Wireshark 1.8.x prior to 1.8.13 and 1.10.x prior to 1.10.6, allowing a remote attacker to execute arbitrary code or cause a denial of service via a large MPEG record. The roo...

Wireshark 1.10.x < 1.10.6 Multiple Vulnerabilities

The installed version of Wireshark 1.10.x is a version prior to 1.10.6. It is, therefore, affected by denial of service vulnerabilities in the following dissectors : - NFS dissector CVE-2014-2281 - M3UA dissector CVE-2014-2282 - RLC dissector CVE-2014-2283 Additionally, a flaw exists in the...

KLA10588 Multiple vulnerabilities in Wireshark

Buffer overflow vulnerabilities were found in Wireshark. By exploiting these vulnerabilities malicious users can cause denial of service or execute arbitrary code. These vulnerabilities can be exploited remotely via a specially designed packet trace. Original advisories WNPA advisory Exploitation...

CVE-2013-2299

CVE-2013-2299 affects Advantech WebAccess (formerly BroadWin WebAccess) prior to version 7.1 (2013-05-30). The vulnerability is a Cross-site Scripting (XSS) flaw that allows remote authenticated users to inject arbitrary HTML/script via unspecified vectors. NVD lists CVSSv2: base score 3.5 (low) ...

CVE-2013-2299

Cross-site scripting XSS vulnerability in Advantech WebAccess formerly BroadWin WebAccess before 7.1 2013.05.30 allows remote authenticated users to inject arbitrary web script or HTML via unspecified vectors...

CVE-2012-2299

The Ubercart module for Drupal (versions 6.x-2.x prior to 6.x-2.8 and 7.x-3.x prior to 7.x-3.1) stores passwords for new customers in plaintext during checkout, enabling local users to read sensitive information from the database. Affected products: Ubercart on Drupal 6.x and 7.x. Root cause: lac...

Debian Security Advisory DSA 2299-1 (ca-certificates)

The remote host is missing an update to ca-certificates announced via advisory DSA 2299-1. OpenVAS Vulnerability Test $Id: deb22991.nasl 6613 2017-07-07 12:08:40Z cfischer $ Description: Auto-generated from advisory DSA 2299-1 ca-certificates Authors: Thomas Reinke Copyright: Copyright c 2011...

CVE-2011-2299

CVE-2011-2299 affects Oracle SPARC Enterprise M3000/M4000/M5000/M8000/M9000 XCP 1101 and earlier, related to the XSCF Control Package (XCP). The vulnerability is described as unspecified with potential impact to confidentiality, integrity, and availability, and requires no user interaction. The a...

Google Chrome 'WebKit' Multiple Vulnerabilities (Linux) - Sep 10

This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodgooglechromemultvulnlin01sep10.nasl 5394 2017-02-22 09:22:42Z teissa $ Google Chrome 'WebKit' Multiple Vulnerabilities Linux - Sep 10 Authors: Sooraj KS Copyright: Copyright c...

Google Chrome 'WebKit' Multiple Vulnerabilities (Windows) - June 10

This host is installed with Google Chrome and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: secpodgooglechromemultvulnwinjun10.nasl 5394 2017-02-22 09:22:42Z teissa $ Google Chrome 'WebKit' Multiple Vulnerabilities Windows - June 10 Authors: Madhuri D Updated By: Sooraj KS...

CVE-2010-2299

The Clipboard::DispatchObject function in app/clipboard/clipboard.cc in Google Chrome before 5.0.375.70 does not properly handle CBFSMBITMAP objects in a ViewHostMsgClipboardWriteObjectsAsync message, which might allow remote attackers to execute arbitrary code via vectors involving crafted data...

CVE-2010-2299

The CVE-2010-2299 entry describes a Type Confusion in Google Chrome’s Clipboard::DispatchObject (app/clipboard/clipboard.cc) where improper handling of CBF_SMBITMAP in ViewHostMsg_ClipboardWriteObjectsAsync could enable remote code execution via crafted data from the renderer. Affected are Chrome...

CVE-2010-2299

Removed by vendor...

CVE-2008-2299

The CVE-2008-2299 entry involves Citrix Presentation Server 4.5 and earlier (also affecting Access Essentials 2.0 and Desktop Server 1.0) where SecureICA and ICA Basic encryption can be configured but allow clients to end up using weaker encryption settings than intended, potentially bypassing ad...

CVE-2002-2299

Thatware versions 0.3 through 0.5.2 are affected by a PHP remote file inclusion vulnerability. The flaw allows remote attackers to execute arbitrary PHP code via the root_path parameter, enabling code execution on the server. The affected component is thatfile.php in Thatware, and exploitation le...

CVE-2007-2299

CVE-2007-2299 affects Frogss CMS 0.7 and earlier. The vulnerability is SQL injection in multiple vectors: the dzial parameter to katalog.php and the t parameter to forum.php or forum/viewtopic.php, with different vectors from CVE-2006-4536. NVD/related records list a CVSS v2 base score of 7.5 (HI...

CVE-2004-2299

The CVE-2004-2299 entry concerns Omnicron OmniHTTPd 3.0a and earlier with a buffer overflow triggered by an HTTP GET request containing a long Range header. This allows remote attackers to execute arbitrary code. Connected sources reference a related “too long URL” vulnerability family; specifics...

CVE-2005-2299

CVE-2005-2299 affects Simple Message Board Version 2.0 Beta 1 and describes multiple XSS flaws exposed via parameters: FID (forum.cfm), UID (user.cfm), TID (thread.cfm), and PostDate (search.cfm). The vulnerability allows remote injection of arbitrary script/HTML. CVSS details in the entry indica...