CVE-2013-4923

Memory leak in the dissectdcomActivationProperties function in epan/dissectors/packet-dcom-sysact.c in the DCOM ISystemActivator dissector in Wireshark 1.10.x before 1.10.1 allows remote attackers to cause a denial of service memory consumption via crafted packets...

CVE-2013-4925

CVE-2013-4925 is a Wireshark vulnerability (Wireshark 1.10.x prior to 1.10.1) caused by an integer signedness error in epan/dissectors/packet-dcom-sysact.c (DCOM ISystemActivator dissector). The issue allows remote attackers to trigger a denial of service via a crafted packet, resulting in an ass...

CVE-2013-4924

epan/dissectors/packet-dcom-sysact.c in the DCOM ISystemActivator dissector in Wireshark 1.10.x before 1.10.1 does not properly validate certain index values, which allows remote attackers to cause a denial of service assertion failure and application exit via a crafted packet...

CVE-2013-4924

CVE-2013-4924 affects Wireshark’s DCOM ISystemActivator dissector (epan/dissectors/packet-dcom-sysact.c) in Wireshark 1.10.x prior to 1.10.1. The vulnerability arises from inadequate validation of certain index values in crafted packets, enabling a remote attacker to trigger an assertion failure ...

CVE-2013-4923: Undefined Security Weakness

Memory leak in the dissectdcomActivationProperties function in epan/dissectors/packet-dcom-sysact.c in the DCOM ISystemActivator dissector in Wireshark 1.10.x before 1.10.1 allows remote attackers to cause a denial of service memory consumption via crafted packets...

CVE-2013-4922: Undefined Security Weakness

Double free vulnerability in the dissectdcomActivationProperties function in epan/dissectors/packet-dcom-sysact.c in the DCOM ISystemActivator dissector in Wireshark 1.10.x before 1.10.1 allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2013-4924: Improper Input Validation

epan/dissectors/packet-dcom-sysact.c in the DCOM ISystemActivator dissector in Wireshark 1.10.x before 1.10.1 does not properly validate certain index values, which allows remote attackers to cause a denial of service assertion failure and application exit via a crafted packet...

CVE-2013-4926: Improper Input Validation

epan/dissectors/packet-dcom-sysact.c in the DCOM ISystemActivator dissector in Wireshark 1.10.x before 1.10.1 does not properly determine whether there is remaining packet data to process, which allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2013-4925: Undefined Security Weakness

Integer signedness error in epan/dissectors/packet-dcom-sysact.c in the DCOM ISystemActivator dissector in Wireshark 1.10.x before 1.10.1 allows remote attackers to cause a denial of service assertion failure and daemon exit via a crafted packet...

PT-2013-5272

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.10.x through 1.10.0 Description The issue is related to the DCOM ISystemActivator dissector in Wireshark, where certain index values are not properly validated. This allows remote attackers to cause a denial of service,...

PT-2013-5271

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.10.x prior to 1.10.1 Description The issue is related to a memory leak in the dissect dcom ActivationProperties function in the DCOM ISystemActivator dissector. This allows remote attackers to cause a denial of service by...

PT-2013-5273

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.10.x through 1.10.0 Description The issue is related to an integer signedness error in the DCOM ISystemActivator dissector. This error allows remote attackers to cause a denial of service, resulting in an assertion failure...

PT-2013-5270

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.10.x prior to 1.10.1 Description The issue is related to a double free vulnerability in the dissect dcom ActivationProperties function in the DCOM ISystemActivator dissector. This vulnerability allows remote attackers to...

PT-2013-5274

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.10.x through 1.10.0 Description The issue arises from the DCOM ISystemActivator dissector in Wireshark, which fails to properly determine if there are remaining packet data to process. This allows remote attackers to cause...

Microsoft RPC DCOM Interface - Remote Overflow (MS03-026) (Metasploit)

$Id: ms03026dcom.rb 11545 2011-01-11 17:56:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Microsoft NetDDE Service Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Microsoft...

Microsoft Windows Schannel Security Package Code Execution (MS07-031; CVE-2007-2218)

The Secure Channel Schannel security package supports multiple public-key-based protocols, such as SSL Secure Sockets Layer versions 2.0 and 3.0, Transport Layer Security TLS 1.0, and Private Communication Technology PCT 1.0. When the Schannel security package is used, DCOM automatically negotiat...

MS Windows (DCOM RPC2) Universal Shellcode

No description provided by source. ; Segment type: Pure code ;seg000 segment byte public 'CODE' use32 ; assume cs:seg000 ; assume es:nothing, ss:nothing, ds:nothing, fs:nothing, gs:nothing .386 assume cs:seg000 var29C = byte ptr -29Ch var28C = byte ptr -28Ch var25F = byte ptr -25Fh var254 = dword...

Blaster Attacks (CVE-2003-0352)

Buffer overflow in a certain DCOM interface for RPC in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a malformed message, as exploited by the Blaster, MSblast, LovSAN, Nachi, and Welchia worms...

Microsoft Windows DCOM RPC Interface Buffer Overflow (MS03-026; CVE-2003-0352; CVE-2003-0715)

Heap-based buffer overflow in the Distributed Component Object Model DCOM interface in the RPCSS Service allows remote attackers to execute arbitrary code. This is done via a malformed DCERPC DCOM object activation request packet with modified length fields...