33 matches found
CVE-2020-9352
An issue was discovered in SmartClient 12.0. Unauthenticated exploitation of blind XXE can occur in the downloadWSDL feature by sending a POST request to /tools/developerConsoleOperations.jsp with a valid payload in the transaction parameter. NOTE: the documentation states "These tools are, by...
CVE-2020-9352
SmartClient 12.0 is affected by an unauthenticated blind XML External Entity (XXE) in the downloadWSDL feature. An attacker can trigger the vulnerability by sending a POST to /tools/developerConsoleOperations.jsp with a valid payload in the _transaction parameter. The issue is documented across m...
CVE-2019-9352
CVE-2019-9352 affects the Android Media framework (libstagefright) on Android 10, where a missing bounds check can cause resource exhaustion and remote denial of service. The issue requires user interaction to exploit and is reported as a DoS with an impact to availability. Root cause: insufficie...
CVE-2015-9352
The CVE-2015-9352 entry concerns the WordPress WP-Polls plugin prior to version 2.72, which contains an SQL injection flaw due to lack of validation of externally supplied SQL statements in database operations. Affected component: WP-Polls plugin for WordPress. Root cause: unsafely constructed SQ...
SUSE SLED12 / SLES12 Security Update : wireshark (SUSE-SU-2017:1663-1)
The network debugging tool wireshark was updated to version 2.2.7 to fix the following issues : - CVE-2017-9352: Bazaar dissector infinite loop wnpa-sec-2017-22 bsc1042304 - CVE-2017-9348: DOF dissector read overflow wnpa-sec-2017-23 bsc1042303 - CVE-2017-9351: DHCP dissector read overflow...
SUSE SLES11 Security Update : wireshark (SUSE-SU-2017:1664-1)
The network analysis tool wireshark was updated to version 2.0.13 to fix the following issues : - CVE-2017-9352: Bazaar dissector infinite loop wnpa-sec-2017-22 bsc1042304 - CVE-2017-9348: DOF dissector read overflow wnpa-sec-2017-23 bsc1042303 - CVE-2017-9351: DHCP dissector read overflow...
Security fix for the ALT Linux 7 package wireshark version 2.2.7-alt1.M70P.1
2.2.7-alt1.M70P.1 built June 4, 2017 Anton Farygin in task 183813 June 4, 2017 Anton Farygin - new version with these security fixes: wnpa-sec-2017-22 Bazaar dissector infinite loop CVE-2017-9352 wnpa-sec-2017-23 DOF dissector read overflow CVE-2017-9348 wnpa-sec-2017-24 DHCP dissector read...
Security fix for the ALT Linux 9 package wireshark version 2.2.7-alt1
June 4, 2017 Anton Farygin 2.2.7-alt1 - new version with these security fixes: wnpa-sec-2017-22 Bazaar dissector infinite loop CVE-2017-9352 wnpa-sec-2017-23 DOF dissector read overflow CVE-2017-9348 wnpa-sec-2017-24 DHCP dissector read overflow CVE-2017-9351 wnpa-sec-2017-25 SoulSeek dissector...
CVE-2017-9352
In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the Bazaar dissector could go into an infinite loop. This was addressed in epan/dissectors/packet-bzr.c by ensuring that backwards parsing cannot occur...
CVE-2017-9352
Wireshark CVE-2017-9352 affects the Bazaar (bzr) dissector: versions 2.2.0–2.2.6 and 2.0.0–2.0.12 can enter an infinite loop due to backwards parsing in epan/dissectors/packet-bzr.c. The fix was implemented by ensuring that backward parsing cannot occur. Technical details: affected products/versi...
Wireshark Multiple Denial-of-Service Vulnerabilities-01 (Jun 2017) - Mac OS X
Wireshark is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark"; ifdescripti...
CVE-2014-9352
CVE-2014-9352 affects Scalix Web Access (mail administration login panel) with XXE and XSS vulnerabilities disclosed across multiple databases. OpenVAS describes XXE and XSS in Scalix Web Access <= 11.4.6.12377 and <= 12.x