Wireshark Heap Based BOF and Denial of Service Vulnerabilities (Windows)

The host is installed with Wireshark and is prone to heap based buffer overflow and denial of service vulnerabilities. OpenVAS Vulnerability Test $Id: gbwiresharkbofndosvulnwin.nasl 7052 2017-09-04 11:50:51Z teissa $ Wireshark Heap Based BOF and Denial of Service Vulnerabilities Windows Authors:...

CVE-2011-4102

Heap-based buffer overflow in the erfreadheader function in wiretap/erf.c in the ERF file parser in Wireshark 1.4.0 through 1.4.9 and 1.6.x before 1.6.3 allows remote attackers to cause a denial of service application crash via a malformed file...

CVE-2011-4102

CVE-2011-4102 : In Wireshark, a heap-based buffer overflow in the erf_read_header function of wiretap/erf.c in the ERF file parser can be triggered by a malformed file, leading to an application crash (denial of service). Affected product versions per connected doc: Wireshark 1.4.0–1.4.9 and 1.6....

Cross site scripting

Cross-site scripting XSS vulnerability in the Sage add-on 1.3.10 and earlier for Firefox allows remote attackers to inject arbitrary web script or HTML via a crafted feed, a different vulnerability than CVE-2009-4102...

[security bulletin] HPSBMA02604 SSRT100320 rev.1 - HP Insight Recovery for Windows, Remote Cross Site Scripting (XSS), Arbitrary File Download

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 SUPPORT COMMUNICATION - SECURITY BULLETIN Document ID: c02571464 Version: 1 HPSBMA02604 SSRT100320 rev.1 - HP Insight Recovery for Windows, Remote Cross Site Scripting XSS, Arbitrary File Download NOTICE: The information in this Security Bulletin shou...

CVE-2010-4102

CVE-2010-4102 affects HP Insight Recovery prior to 6.2. It allows remote attackers to read arbitrary files via unknown vectors. HP has addressed the issue in Insight Recovery v6.2 or later; apply the update to mitigate. The CVSS impact in the source entry is Base Score 5.0 (Medium). Details on ex...

[SECURITY] [DSA 1951-1] New firefox-sage packages fix insufficient input sanitizing

------------------------------------------------------------------------ Debian Security Advisory DSA-1951-1 [email protected] http://www.debian.org/security/ Steffen Joeris December 15, 2009 http://www.debian.org/security/faq -...

[SECURITY] [DSA 1951-1] New firefox-sage packages fix insufficient input sanitizing

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1951-1 [email protected] http://www.debian.org/security/ Steffen Joeris December 15, 2009 http://www.debian.org/security/faq -...

CVE-2009-4102

The CVE-2009-4102 entry concerns the Sage Firefox extension (1.4.3 and earlier) which processes feed descriptions with chrome privileges, enabling remote command execution and cross-domain scripting via crafted RSS/Atom feeds. Affected versions include Sage prior to 1.4.6; Debian’s advisory and J...

CVE-2008-4102

CVE-2008-4102 affects Joomla! 1.5 prior to 1.5.7, where PHP’s PRNG is initialized with a weak seed, enabling easier guessing of mt_rand outputs and compromising password-reset tokens. This is described in the CVE entry and corroborated by related records (e.g., CVE-2008-4102). The vulnerability s...

CVE-2007-4102

The CVE-2007-4102 entry describes a Cross-site Scripting (XSS) flaw in sBlog 0.7.3 Beta, specifically in search.php. The vulnerability allows remote attackers to inject arbitrary HTML and script via a leading '"/> sequence in the search string. Impact is stated as HTML/script injection without...

CVE-2006-4102

The CVE-2006-4102 issue affects SQLiteWebAdmin 0.1 and earlier by Falko Timme and Till Brehm. In tpl.inc.php , the vulnerability arises from handling of the conf[classpath] parameter, allowing an attacker to supply a URL that leads to remote PHP code execution (a PHP remote file inclusion). The d...