[SECURITY] [DSA 3648-1] wireshark security update

------------------------------------------------------------------------- Debian Security Advisory DSA-3648-1 [email protected] https://www.debian.org/security/ Moritz Muehlenhoff August 12, 2016 https://www.debian.org/security/faq -...

Wireshark 2.0.x < 2.0.5 Multiple Vulnerabilities

The version of Wireshark installed on the remote Windows host is prior to 2.0.5. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-2.0.5 advisory. - CORBA IDL dissectors could crash on 64-bit Windows. It may be possible to make Wireshark crash by injecting a...

Wireshark Multiple Denial of Service Vulnerabilities-02 (Aug 2016) - Windows

Wireshark is prone to multiple denial of service vulnerabilities. SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

openSUSE Security Update : wireshark (openSUSE-2016-947)

Wireshark was updated to 1.12.13 to fix a number of minor security issues and bugs. This release fixes a number issues in protocol dissectors that could have allowed a remote attacker to crash Wireshark or cause excessive CPU usage through specially crafted packages inserted into the network or a...

CVE-2016-6510

CVE-2016-6510 : Off-by-one error in Wireshark’s RLC dissector (epan/dissectors/packet-rlc.c) allows remote crash/DoS via a crafted packet. Affected: Wireshark 1.12.x before 1.12.13 and 2.x before 2.0.5. Public advisories confirm DoS potential; Debian/Mageia updates fix this in newer packages. Rem...

CVE-2015-6510

pfSense

CVE-2014-6510

CVE-2014-6510 affects Oracle Solaris 11, where a vulnerability in the Power Management Utility could allow a local attacker to compromise confidentiality, integrity, and availability. The exposed impact is rated as complete for all three CIA aspects, with local attack vector and no authentication...

CVE-2012-6510

CVE-2012-6510 affects NetArt Media Car Portal 3.0. The issue is multiple cross-site scripting (XSS) vulnerabilities that allow remote attackers to inject arbitrary web script or HTML via various input fields (PWRS/Description when posting a vehicle; news title; sub user name; group name; dealer n...

CVE-2012-6510

Multiple cross-site scripting XSS vulnerabilities in NetArt Media Car Portal 3.0 allow remote attackers to inject arbitrary web script or HTML via the 1 PWRS or 2 Description field when posting a new vehicle; 3 news title when creating news; 4 Name when creating a sub user; 5 group name when...

Gentoo Security Advisory GLSA 200904-01 (openfire)

The remote host is missing updates announced in advisory GLSA 200904-01. SPDX-FileCopyrightText: 2009 E-Soft Inc. Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only OR GPL-3.0-only...

CVE-2008-6510

CVE-2008-6510 is an XSS vulnerability in Openfire’s Admin Console login.jsp (Openfire, = net-im/openfire-3.6.3 to remediate. The connected documents do not provide details on exploitation in the wild.

CVE-2008-6510

creationtimestamp| type| source ---|---|--- 2008-11-09 00:00:00+00:00| confirmed| https://www.exploit-db.com/exploits/7075...

CVE-2007-6510

Multiple stack-based buffer overflows in ProWizard 4 PC prowiz 1.62 and earlier allow remote attackers to execute arbitrary code via a crafted file to the 1 AMOS-MusicBank, 2 FuzzacPacker, and 3 QuadraComposer rippers; and 4 have an unknown impact via a crafted file to the SkytPacker ripper...

CVE-2007-6510

CVE-2007-6510 describes multiple stack-based buffer overflows in ProWizard 4 PC (prowiz) versions up to and including 1.62, enabling remote code execution via crafted files to specific rippers: AMOS-MusicBank, FuzzacPacker, QuadraComposer. A fourth component, SkytPacker ripper, has an unknown imp...

CVE-2006-6510

SiteKiosk pre-6.5.150 contains an unspecified ActiveX control labeled “safe for scripting” that can bypass protections and read arbitrary files via certain functions. This is documented across CVE-2006-6510 sources (NVD), and corroborated by the Nessus entry noting additional locally exploitable ...