CVE-2012-2526

The Remote Desktop Protocol RDP implementation in Microsoft Windows XP SP3 does not properly process packets in memory, which allows remote attackers to execute arbitrary code by sending crafted RDP packets triggering access to a deleted object, aka "Remote Desktop Protocol Vulnerability."...

MS12-053: Vulnerability in Remote Desktop Could Allow Remote Code Execution (2723135)

An arbitrary remote code vulnerability exists in the implementation of the Remote Desktop Protocol RDP on the remote Windows host. The vulnerability is due to the way that RDP accesses an object in memory that has been deleted. If RDP has been enabled on the affected system, an unauthenticated,...

UBUNTU-CVE-2012-2978

query.c in NSD 3.0.x through 3.0.8, 3.1.x through 3.1.1, and 3.2.x before 3.2.12 allows remote attackers to cause a denial of service NULL pointer dereference and child process crash via a crafted DNS packet...

CVE-2012-4048

The PPP dissector in Wireshark 1.4.x before 1.4.14, 1.6.x before 1.6.9, and 1.8.x before 1.8.1 allows remote attackers to cause a denial of service invalid pointer dereference and application crash via a crafted packet, as demonstrated by a usbmon dump...

CVE-2012-2607

The Johnson Controls CK721-A controller with firmware before SSM438803.1.0.14BB allows remote attackers to perform arbitrary actions via crafted packets to TCP port 41014 aka the download port...

Design/Logic Flaw

The Johnson Controls CK721-A controller with firmware before SSM438803.1.0.14BB allows remote attackers to perform arbitrary actions via crafted packets to TCP port 41014 aka the download port...

CVE-2012-2607

The Johnson Controls CK721-A controller with firmware before SSM438803.1.0.14BB allows remote attackers to perform arbitrary actions via crafted packets to TCP port 41014 aka the download port...

CVE-2012-4026

The Johnson Controls Pegasys P2000 server with software before 3.11 allows remote attackers to trigger false alerts via crafted packets to TCP port 41013 aka the upload port, a different vulnerability than CVE-2012-2607...

Wireshark Multiple Denial of Service Vulnerabilities - July 12 (Mac OS X)

This host is installed with Wireshark and is prone to multiple denial of service vulnerabilities. OpenVAS Vulnerability Test $Id: gbwiresharkmultdosvulnmacosxjul12.nasl 5958 2017-04-17 09:02:19Z teissa $ Wireshark Multiple Denial of Service Vulnerabilities - July 12 Mac OS X Authors: Madhuri D...

CVE-2012-2393

epan/dissectors/packet-diameter.c in the DIAMETER dissector in Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 does not properly construct certain array data structures, which allows remote attackers to cause a denial of service application crash via a crafted packet that triggers incorrect...

PT-2012-1537 · Linux · Linux Kernel

Name of the Vulnerable Software and Affected Versions: Linux kernel versions prior to 2.6.39 Description: The issue is related to the ip expire function in the Linux kernel, which does not properly construct ICMP TIME EXCEEDED packets after a timeout. This allows remote attackers to cause a denia...

PT-2012-2371 · Microsoft · Windows Server 2003 +5

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 and SP3 Microsoft Windows Server 2003 version SP2 Microsoft Windows Vista version SP2 Microsoft Windows Server 2008 versions SP2, R2, and R2 SP1 Microsoft Windows 7 versions Gold and SP1 Description: A remote...

SuSE 10 Security Update : quagga (ZYPP Patch Number 8108)

This update of quagga fixes multiple security flaws that could have caused a Denial of Service via specially crafted packets. CVE-2012-1820 / CVE-2012-0249 / CVE-2012-0250 / CVE-2012-0255 Additionally, issues with service owned directories in combination with logrotate were fixed. %NASLMINLEVEL...

CVE-2012-0409

Multiple buffer overflows in EMC AutoStart 5.3.x and 5.4.x before 5.4.3 allow remote attackers to cause a denial of service agent crash or possibly execute arbitrary code via crafted packets...

Buffer overflow

Multiple buffer overflows in EMC AutoStart 5.3.x and 5.4.x before 5.4.3 allow remote attackers to cause a denial of service agent crash or possibly execute arbitrary code via crafted packets...

Cisco IOS XR Software Route Processor Denial of Service Vulnerability

Cisco IOS XR Software contains a vulnerability when handling crafted packets that may result in a denial of service condition. The vulnerability only exists on Cisco 9000 Series Aggregation Services Routers ASR Route Switch Processor RSP-4G and RSP-8G, Route Switch Processor 440 RSP440, and Cisco...

CVE-2011-3188

The 1 IPv4 and 2 IPv6 implementations in the Linux kernel before 3.1 use a modified MD4 algorithm to generate sequence numbers and Fragment Identification values, which makes it easier for remote attackers to cause a denial of service disrupted networking or hijack network sessions by predicting...

CVE-2011-2699

The IPv6 implementation in the Linux kernel before 3.1 does not generate Fragment Identification values separately for each destination, which makes it easier for remote attackers to cause a denial of service disrupted networking by predicting these values and sending crafted packets...

Design/Logic Flaw

The 1 IPv4 and 2 IPv6 implementations in the Linux kernel before 3.1 use a modified MD4 algorithm to generate sequence numbers and Fragment Identification values, which makes it easier for remote attackers to cause a denial of service disrupted networking or hijack network sessions by predicting...

CVE-2011-2699

The IPv6 implementation in the Linux kernel before 3.1 does not generate Fragment Identification values separately for each destination, which makes it easier for remote attackers to cause a denial of service disrupted networking by predicting these values and sending crafted packets...