211 matches found
CVE-2012-4445
Heap-based buffer overflow in the eapservertlsprocessfragment function in eapservertlscommon.c in the EAP authentication server in hostapd 0.6 through 1.0 allows remote attackers to cause a denial of service crash or abort via a small "TLS Message Length" value in an EAP-TLS message with the "Mor...
CVE-2012-4445
Heap-based buffer overflow in the eapservertlsprocessfragment function in eapservertlscommon.c in the EAP authentication server in hostapd 0.6 through 1.0 allows remote attackers to cause a denial of service crash or abort via a small "TLS Message Length" value in an EAP-TLS message with the "Mor...
Microsoft Windows Messenger Service Buffer Overrun Code Execution (CVE-2003-0717)
A remote code execution vulnerability has been reported in Microsoft Windows. The vulnerability is due to improper validation of message length. A remote attacker may exploit this vulnerability by sending an overly long message to the target service. Successful exploitation may allow the attacker...
CVE-2004-0893
The Local Procedure Call LPC interface of the Windows Kernel for Windows NT 4.0, Windows 2000, Windows XP, and Windows Server 2003 does not properly validate the lengths of messages sent to the LPC port, which allows local users to gain privileges, aka "Windows Kernel Vulnerability."...
[Full-Disclosure] Proof of concept for Windows Messenger Service overflow
/ DoS Proof of Concept for MS03-043 - exploitation shouldn't be too hard. Launching it one or two times against the target should make the machine reboot. Tested against a Win2K SP4. "The vulnerability results because the Messenger Service does not properly validate the length of a message before...
EveryBuddy 0.4.3 - Long Message Denial of Service
source: https://www.securityfocus.com/bid/8343/info EveryBuddy is prone to a denial of service vulnerability when handling instant messages of excessive length. This could be exploited with a malicious instant messaging client. This condition may be due to a buffer overflow, though this has not...
CVE-2003-0163
decryptmsg for the Gaim-Encryption GAIM plugin 1.15 and earlier does not properly validate a message length parameter, which allows remote attackers to cause a denial of service crash via a negative length, which overwrites arbitrary heap memory with a zero byte...
CVE-2003-0163
decryptmsg for the Gaim-Encryption GAIM plugin 1.15 and earlier does not properly validate a message length parameter, which allows remote attackers to cause a denial of service crash via a negative length, which overwrites arbitrary heap memory with a zero byte...
Gaim buffer overflow DoS
Insuficient message length check leads to heap corruption...
Icq 2001&2002 vulnerability
Icq 2001&2002 have feature, that allows to insert graphical smiles. I found, that if you send message filled with lots of smilesicq msg can be about 7000 bytes long, then target icq hangs for 10-20 seconds, consuming all CPU time, or simply crashs. It seems for me that such type of message crashs...
