Code injection

Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows remote attackers to cause a denial of service daemon crash via a crafted packet with a certain opcode and a large value in a size field...

CVE-2012-3792

Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows remote attackers to cause a denial of service out-of-bounds read operation via a crafted packet that triggers a certain Find Node check attempt...

PT-2012-5003

Name of the Vulnerable Software and Affected Versions Pro-face WinGP PC Runtime versions 3.1.00 and earlier Pro-face Pro-Server EX versions 1.30.000 and earlier Description The issue allows remote attackers to cause a denial of service, resulting in a daemon crash. This is achieved by sending a...

PT-2012-5004

Name of the Vulnerable Software and Affected Versions Pro-face WinGP PC Runtime versions 3.1.00 and earlier Pro-face Pro-Server EX versions 1.30.000 and earlier Description The issue allows remote attackers to cause a denial of service, resulting in an unhandled exception and daemon crash. This i...

CVE-2012-3797: Improper Restriction of Operations within the Bounds of a Memory Buffer

Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, does not properly check packet sizes before reusing packet memory buffers, which allows remote attackers to cause a denial of service heap memory corruption or possibly have unspecified...

CVE-2012-3794: Improper Restriction of Operations within the Bounds of a Memory Buffer

Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows remote attackers to cause a denial of service unhandled exception and daemon crash via a crafted packet with a certain opcode that triggers an invalid attempt to allocate a large...

PT-2012-5006

Name of the Vulnerable Software and Affected Versions Pro-face WinGP PC Runtime versions 3.1.00 and earlier Pro-face Pro-Server EX versions 1.30.000 and earlier Description The issue allows remote attackers to obtain sensitive information from daemon memory by sending a crafted packet with a...

PT-2012-5007

Name of the Vulnerable Software and Affected Versions Pro-face WinGP PC Runtime versions 3.1.00 and earlier Pro-face Pro-Server EX versions 1.30.000 and earlier Description The issue is related to improper checking of packet sizes before reusing packet memory buffers. This allows remote attackers...

PT-2012-5005

Name of the Vulnerable Software and Affected Versions Pro-face WinGP PC Runtime versions 3.1.00 and earlier Pro-face Pro-Server EX versions 1.30.000 and earlier Description The issue allows remote attackers to cause a denial of service, resulting in a daemon crash. This can be achieved by sending...

CVE-2012-3795: Improper Restriction of Operations within the Bounds of a Memory Buffer

Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows remote attackers to cause a denial of service daemon crash via a crafted packet with a certain opcode and a large value in a size field...

PT-2012-5002

Name of the Vulnerable Software and Affected Versions Pro-face WinGP PC Runtime versions 3.1.00 and earlier Pro-face Pro-Server EX versions 1.30.000 and earlier Description The issue allows remote attackers to cause a denial of service via a crafted packet, triggering a certain Find Node check...

Authentication flaw

The agent in Bradford Network Sentry before 5.3.3 does not require authentication for messages, which allows remote attackers to trigger the display of arbitrary text on a workstation via a crafted packet to UDP port 4567, as demonstrated by a replay attack...

CVE-2012-1816

PORTSERV.exe in Emerson DeltaV and DeltaV Workstations 9.3.1, 10.3.1, 11.3, and 11.3.1 and DeltaV ProEssentials Scientific Graph 5.0.0.6 allows remote attackers to cause a denial of service daemon crash via a crafted 1 TCP or 2 UDP packet to port 111...

CVE-2012-2488

Cisco IOS XR before 4.2.1 on ASR 9000 series devices and CRS series devices allows remote attackers to cause a denial of service packet transmission outage via a crafted packet, aka Bug IDs CSCty94537 and CSCtz62593...

Design/Logic Flaw

Cisco IOS XR before 4.2.1 on ASR 9000 series devices and CRS series devices allows remote attackers to cause a denial of service packet transmission outage via a crafted packet, aka Bug IDs CSCty94537 and CSCtz62593...

CVE-2012-2488: Improper Input Validation

Cisco IOS XR before 4.2.1 on ASR 9000 series devices and CRS series devices allows remote attackers to cause a denial of service packet transmission outage via a crafted packet, aka Bug IDs CSCty94537 and CSCtz62593...

Integer overflow

Integer overflow in the server in xArrow before 3.4.1 allows remote attackers to execute arbitrary code via a crafted packet that triggers an out-of-bounds read operation...

CVE-2012-2428

Integer overflow in the server in xArrow before 3.4.1 allows remote attackers to execute arbitrary code via a crafted packet that triggers an out-of-bounds read operation...

CVE-2012-2513

The Diaginput function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remote attackers to cause a denial of service daemon crash via a crafted SAP Diag packet...

CVE-2012-2612

The DiagTraceHex function in disp+work.exe 7010.29.15.58313 and 7200.70.18.23869 in the Dispatcher in SAP NetWeaver 7.0 EHP1 and EHP2 allows remote attackers to cause a denial of service daemon crash via a crafted SAP Diag packet...