wireshark security update

CentOS Errata and Security Advisory CESA-2014:0341 Updated wireshark packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS...

Moderate: Red Hat Security Advisory: wireshark security update

Updated wireshark packages that fix multiple security issues are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severity ratings, a...

Amazon Linux AMI : wireshark (ALAS-2013-251)

Two flaws were found in Wireshark. If Wireshark read a malformed packet off a network or opened a malicious dump file, it could crash or, possibly, execute arbitrary code as the user running Wireshark. CVE-2013-3559 , CVE-2013-4083 Several denial of service flaws were found in Wireshark. Wireshar...

Wireshark Multiple Dissector Multiple DoS Vulnerabilities (Dec 2012) - Mac OS X

Wireshark is prone to multiple denial of service vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

DEBIAN-CVE-2012-6062

The dissectrtcpapp function in epan/dissectors/packet-rtcp.c in the RTCP dissector in Wireshark 1.6.x before 1.6.12 and 1.8.x before 1.8.4 allows remote attackers to cause a denial of service infinite loop via a crafted packet...

CVE-2012-6062

The dissectrtcpapp function in epan/dissectors/packet-rtcp.c in the RTCP dissector in Wireshark 1.6.x before 1.6.12 and 1.8.x before 1.8.4 allows remote attackers to cause a denial of service infinite loop via a crafted packet...

CVE-2012-5600

CVE-2012-5600 is a rejected reservation duplicate of CVE-2012-6062 and not an active vulnerability entry.

Apache 2.2 < 2.2.21 mod_proxy_ajp DoS

Binary data 6062.prm...

CVE-2008-6062

Cross-site scripting XSS vulnerability in ActionScript in arbitrary Shockwave Flash SWF files created by Adobe Dreamweaver, when the Insert Flash Video feature is used, allows remote attackers to inject arbitrary web script or HTML via an asfunction: URI in the skinName parameter. NOTE: this may...

CVE-2008-6062

Cross-site scripting XSS vulnerability in ActionScript in arbitrary Shockwave Flash SWF files created by Adobe Dreamweaver, when the Insert Flash Video feature is used, allows remote attackers to inject arbitrary web script or HTML via an asfunction: URI in the skinName parameter. NOTE: this may...

CVE-2008-6062

CVE-2008-6062 describes an XSS vulnerability in ActionScript within arbitrary Shockwave Flash (SWF) files created by Adobe Dreamweaver when the Insert Flash Video feature is used. An attacker can inject arbitrary script/HTML via an asfunction: URI in the skinName parameter. The note mentions pote...

CVE-2007-6062

CVE-2007-6062 affects ngIRCd prior to 0.10.3. The vulnerability is in irc-channel.c where a JOIN command without a channel argument can cause a remote crash, leading to a denial of service. Affected component: ngIRCd (irc-channel.c). Root cause: JOIN with missing channel argument described as cra...

Design/Logic Flaw

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-6062. Reason: This candidate is a duplicate of CVE-2007-6062. Notes: All CVE users should reference CVE-2007-6062 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2007-6034

Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: CVE-2007-6062. Reason: This candidate is a duplicate of CVE-2007-6062. Notes: All CVE users should reference CVE-2007-6062 instead of this candidate. All references and descriptions in this candidate have been removed to prevent...

CVE-2007-6034

CVE-2007-6034 is rejected/not used; it is a duplicate of CVE-2007-6062 and does not represent an active vulnerability.

CVE-2006-6062

CVE-2006-6062 affects Apple Mac OS X 10.4.8 (and possibly newer/other builds) and is triggered by processing malformed UDTO HFS+ disk images, which can cause memory corruption and a remote denial-of-service (crash). Public sources describe this as a vulnerability in handling corrupted UDTO HFS+ i...