91 matches found
CVE-2016-4078
CVE-2016-4078 affects the Wireshark IEEE 802.11 dissector (Wireshark 1.12.x up to 1.12.10, and 2.0.x up to 2.0.2). A crafted CAPWAP/IEEE802.11 element list can trigger deep recursion and crash the analyzer, enabling a denial of service when a crafted packet is processed. Root cause: improper rest...
CVE-2016-4078
The IEEE 802.11 dissector in Wireshark 1.12.x before 1.12.11 and 2.0.x before 2.0.3 does not properly restrict element lists, which allows remote attackers to cause a denial of service deep recursion and application crash via a crafted packet, related to epan/dissectors/packet-capwap.c and...
PT-2016-5840
Name of the Vulnerable Software and Affected Versions Wireshark versions 1.12.x through 1.12.10 Wireshark versions 2.0.x through 2.0.2 Description The issue allows remote attackers to cause a denial of service, resulting in deep recursion and application crash, via a crafted packet. This is relat...
PT-2016-5950
Name of the Vulnerable Software and Affected Versions Wireshark versions 1.12.x through 1.12.9 Wireshark versions 2.x through 2.0.1 Description The issue allows remote attackers to cause a denial of service, resulting in deep recursion, stack consumption, and application crash. This is achieved b...
V8: Memory Corruption and Stack Overflow
It was discovered that V8 did not properly check the stack size limit in certain cases. A remote attacker able to send a request that caused a script executed by V8 to use deep recursion could trigger a stack overflow, leading to a crash of an application using V8...
[Advisory] Invision Power Board <= 2.3.5 Multiple Vulnerabilities and Security Bypass
Title: Invision Power Board = 2.3.5 Multiple Vulnerabilities and Security Bypass Vendor: http://www.invisionpower.com/community/board/ Advisory: http://acid-root.new.fr/?0:18 Author: DarkFig gmdarkfig at gmail dot com Released on: 2008/08/29 Changelog: 2008/08/29 Summary: Introduction Blind SQL...
openSUSE 10 Security Update : php5 (php5-3745)
The following issues have been fixed in PHP, which were spotted by the MOPB project or fixed in PHP 5.2.3 release : - missing openbasedir and safemode restriction CVE-2007-3007 - chunksplit integer overflow CVE-2007-2872 - DoS condition in libgd's image processing CVE-2007-2756 - possible...
PHP 4/5 - Executor Deep Recursion Remote Denial of Service
source: https://www.securityfocus.com/bid/22766/info PHP is prone to a denial-of-service vulnerability because it fails to properly sanitize user-supplied input. An attacker with permissions to execute PHP code on an affected computer may exploit this issue to crash PHP and kill all remaining...
CVE-2006-0118: Undefined Security Weakness
Unspecified vulnerability in IBM Lotus Notes and Domino Server before 6.5.5, when running on AIX, allows attackers to cause a denial of service deep recursion leading to stack overflow and crash via long formulas...
CVE-2005-0986
NLSCCSTR.DLL in the web service in IBM Lotus Domino Server 6.5.1, 6.0.3, and possibly other versions allows remote attackers to cause a denial of service deep recursion and nHTTP.exe process crash via a long GET request containing UNICODE decimal value 430 characters, which causes the stack to be...
CVE-2005-0986: Undefined Security Weakness
NLSCCSTR.DLL in the web service in IBM Lotus Domino Server 6.5.1, 6.0.3, and possibly other versions allows remote attackers to cause a denial of service deep recursion and nHTTP.exe process crash via a long GET request containing UNICODE decimal value 430 characters, which causes the stack to be...