34 matches found
CVE-2018-7331
In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-ber.c had an infinite loop that was addressed by validating a length...
CVE-2018-7331
In Wireshark 2.4.0 to 2.4.4 and 2.2.0 to 2.2.12, epan/dissectors/packet-ber.c had an infinite loop that was addressed by validating a length...
CVE-2018-7331
Wireshark vulnerability CVE-2018-7331 affects Wireshark 2.4.0–2.4.4 and 2.2.0–2.2.12, where the epan/dissectors/packet-ber.c parser could enter an infinite loop due to improper length handling. The issue was fixed by validating lengths in the BER dissector. Exploitation via crafted packets or mal...
KLA11201 Multiple vulnerabilities in Wireshark
Multiple serious vulnerabilities have been found in Wireshark. Malicious users can exploit these vulnerabilities to cause denial of service. Below is a complete list of vulnerabilities: 1. An improper operand validation offsets in the SIGCOMP protocol dissector can be exploited remotely via...
CVE-2016-7331
CVE-2016-7331 is rejected/not used; this candidate does not represent an active vulnerability entry.
CVE-2015-7331
The mcollective-puppet-agent plugin before 1.11.1 for Puppet allows remote attackers to execute arbitrary code via vectors involving the --server argument...
CVE-2015-7331
CVE-2015-7331 affects the mcollective-puppet-agent plugin prior to 1.11.1 for Puppet, allowing remote code execution via the --server argument. The vulnerability enables an unauthenticated, remote attacker to execute arbitrary code in the context of the affected application. Supporting documents ...
CVE-2015-7331
The mcollective-puppet-agent plugin before 1.11.1 for Puppet allows remote attackers to execute arbitrary code via vectors involving the --server argument...
Microsoft Internet Explorer Resource Information Disclosure (MS14-052; CVE-2013-7331)
An information disclosure vulnerability exists in Internet Explorer. This vulnerability is caused when the XMLDOM ActiveX control allows local resources to be enumerated. A remote attacker can exploit this issue by enticing a user to open a specially crafted web-page with an affected version of...
CVE-2014-7331
The CVE-2014-7331 entry concerns the Android app TodaysSeniorsNetwork (package com.wTodaysSeniorsNetwork) version 0.21.13245.84038. The provided sources state that the app does not verify X.509 certificates from SSL servers, allowing a man‑in‑the‑middle to spoof servers and obtain sensitive infor...
CVE-2013-7331
creationtimestamp| type| source ---|---|--- 2014-10-10 09:13:59+00:00| seen| MISP/54379a78-dc30-4030-8481-43fe950d210b 2016-04-29 06:40:11+00:00| seen| MISP/57221ede-4084-4c2b-9463-4e1e950d210f 2016-05-16 13:09:16+00:00| seen| MISP/57288bef-5874-418f-be8a-348495ca48b7 2018-05-29 15:50:33+00:00|...
CVE-2013-7331
The Microsoft.XMLDOM ActiveX control in Microsoft Windows 8.1 and earlier allows remote attackers to determine the existence of local pathnames, UNC share pathnames, intranet hostnames, and intranet IP addresses by examining error codes, as demonstrated by a res:// URL, and exploited in the wild ...
CVE-2013-7331
CVE-2013-7331 is an information-disclosure vulnerability in the Microsoft XMLDOM ActiveX control used by Internet Explorer on Windows (XMLDOM object). The flaw allows an attacker to determine the existence of local pathnames, UNC shares, intranet hostnames, and intranet IP addresses by inspecting...