Google Chrome Security Updates (stable-channel-update-for-desktop_31-2016-08) - Windows

Google Chrome is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:google:chrome"; ifdescription...

[SECURITY] [DSA 3660-1] chromium-browser security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3660-1 [email protected] https://www.debian.org/security/ Michael Gilbert September 05, 2016 https://www.debian.org/security/faq -...

CVE-2016-5164

Cross-site scripting XSS vulnerability in WebKit/Source/platform/v8inspector/V8Debugger.cpp in Blink, as used in Google Chrome before 53.0.2785.89 on Windows and OS X and before 53.0.2785.92 on Linux, allows remote attackers to inject arbitrary web script or HTML into the Developer Tools aka...

Gentoo Security Advisory GLSA 201409-01

Gentoo Linux Local Security Checks GLSA 201409-01 SPDX-FileCopyrightText: 2015 Eero Volotinen Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-or-later ifdescription...

openSUSE Security Update : wireshark (openSUSE-SU-2014:1038-1)

This wireshark version update to 1.10.9 fixes the following security issues : - fixes several crashes triggered by malformed protocol packages - The Catapult DCT2000 and IrDA dissectors could underrun a buffer wnpa-sec-2014-08 CVE-2014-5161 CVE-2014-5162 bnc889901 - The GSM Management dissector...

Updated wireshark package fix security vulnerabilities

The Catapult DCT2000 and IrDA dissectors could underrun a buffer CVE-2014-5161, CVE-2014-5162. The GSM Management dissector could crash CVE-2014-5163. The RLC dissector could crash CVE-2014-5164. The ASN.1 BER dissector could crash CVE-2014-5165. The wireshark package has been updated to version...

[ MDVSA-2014:159 ] wireshark

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2014:159 http://www.mandriva.com/en/support/security/ Package : wireshark Date : August 8, 2014 Affected: Business Server 1.0 Problem Description: Multiple vulnerabilities has been discovered and corrected in...

Mandriva Linux Security Advisory : wireshark (MDVSA-2014:159)

Multiple vulnerabilities has been discovered and corrected in wireshark : - The Catapult DCT2000 and IrDA dissectors could underrun a buffer CVE-2014-5161, CVE-2014-5162. - The GTP and GSM Management dissectors could crash CVE-2014-5163. - The RLC dissector could crash CVE-2014-5164. - The ASN.1...

Fedora Update for wireshark FEDORA-2014-9112

The remote host is missing an update for the SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 20 : wireshark-1.10.9-1.fc20 (2014-9112)

Ver. 1.10.9; Security fix for CVE-2014-5164, CVE-2014-5165, CVE-2014-5163, CVE-2014-5161, CVE-2014-5162 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much a...

Wireshark Multiple Denial of Service Vulnerabilities-01 (Aug 2014) - Windows

Wireshark is prone to multiple denial of service vulnerabilities. SPDX-FileCopyrightText: 2014 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2014-5164

The rlcdecodeli function in epan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.10.x before 1.10.9 initializes a certain structure member only after this member is used, which allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2014-5164

The rlcdecodeli function in epan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.10.x before 1.10.9 initializes a certain structure member only after this member is used, which allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2014-5164

The rlcdecodeli function in epan/dissectors/packet-rlc.c in the RLC dissector in Wireshark 1.10.x before 1.10.9 initializes a certain structure member only after this member is used, which allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2014-5164

CVE-2014-5164 affects Wireshark 1.10.x before 1.10.9. The RLC dissector (epan/dissectors/packet-rlc.c) initializes a structure member only after it is used, enabling a crafted network packet to cause a denial of service (application crash). The issue is confirmed in multiple advisories documentin...

KLA10400 DoS vulnerabilities in Wireshark

Multiple serious vulnerabilities have been found in Wireshark. Malicious users can exploit these vulnerabilities to cause denial of service. Below is a complete list of vulnerabilities 1. Improper handling of n and r symbols can be exploited remotely via a specially designed packet; 2. Improper...

Huawei Technologies du Mobile Broadband 16.0 - Local Privilege Escalation

Huawei Technologies du Mobile Broadband 16.0 Local Privilege Escalation Vendor: Huawei Technologies Co., Ltd. Product Web Page: http://www.huawei.com Affected version: 16.002.03.16.124 Summary: du Mobile Broadband is a shareware application for du EITC UAE users to support mobile broadband 3G...

CVE-2013-5164

The CVE-2013-5164 entry concerns Apple iOS prior to 7.0.3, specifically in the Phone app. Multiple race conditions allow physically proximate attackers who access the Contacts pane to bypass the locked state and dial phone numbers from arbitrary Contacts entries. The impact is local (physical pro...

CVE-2012-5164

Fork CMS before 3.2.7 is affected by multiple XSS vulnerabilities that allow remote injection of arbitrary scripts via the term parameter to frontend/modules/search/ajax/autocomplete.php, search/ajax/autosuggest.php, livesuggest.php, and save.php. Affects Fork CMS 3.x up to 3.2.7; CVSSv2 base sco...

CVE-2011-5164

The CVE-2011-5164 entry concerns a stack-based buffer overflow in VanDyke Software AbsoluteFTP. The authenticated/remote issue affects AbsoluteFTP versions 1.9.6 through 2.2.10 and is triggered by a crafted file name in a LIST command response, allowing a remote FTP server to execute arbitrary co...