1330 matches found
CVE-2014-6422
The SDP dissector in Wireshark 1.10.x before 1.10.10 creates duplicate hashtables for a media channel, which allows remote attackers to cause a denial of service application crash via a crafted packet to the RTP dissector...
Design/Logic Flaw
Use-after-free vulnerability in the SDP dissector in Wireshark 1.10.x before 1.10.10 allows remote attackers to cause a denial of service application crash via a crafted packet that leverages split memory ownership between the SDP and RTP dissectors...
UBUNTU-CVE-2014-6422
The SDP dissector in Wireshark 1.10.x before 1.10.10 creates duplicate hashtables for a media channel, which allows remote attackers to cause a denial of service application crash via a crafted packet to the RTP dissector...
CVE-2014-6421
Use-after-free vulnerability in the SDP dissector in Wireshark 1.10.x before 1.10.10 allows remote attackers to cause a denial of service application crash via a crafted packet that leverages split memory ownership between the SDP and RTP dissectors...
Code injection
The SDP dissector in Wireshark 1.10.x before 1.10.10 creates duplicate hashtables for a media channel, which allows remote attackers to cause a denial of service application crash via a crafted packet to the RTP dissector...
CVE-2014-6421
Use-after-free vulnerability in the SDP dissector in Wireshark 1.10.x before 1.10.10 allows remote attackers to cause a denial of service application crash via a crafted packet that leverages split memory ownership between the SDP and RTP dissectors...
CVE-2014-6421
CVE-2014-6421 affects Wireshark 1.10.x before 1.10.10. It is a use-after-free in the SDP dissector caused by split memory ownership between the SDP and RTP dissectors, enabling a remote attacker to trigger a denial-of-service (application crash) with a crafted packet. Connected advisories list CV...
CVE-2014-6422
The SDP dissector in Wireshark 1.10.x before 1.10.10 creates duplicate hashtables for a media channel, which allows remote attackers to cause a denial of service application crash via a crafted packet to the RTP dissector...
CVE-2014-6422
CVE-2014-6422 affects Wireshark 1.10.x before 1.10.10, where the SDP dissector creates duplicate hashtables for a media channel, enabling a remote attacker to cause a denial of service (application crash) via a crafted RTP packet. A fix is available in Wireshark 1.10.10 and later; upgrading to or...
CVE-2014-6421
Use-after-free vulnerability in the SDP dissector in Wireshark 1.10.x before 1.10.10 allows remote attackers to cause a denial of service application crash via a crafted packet that leverages split memory ownership between the SDP and RTP dissectors...
CVE-2014-6422
The SDP dissector in Wireshark 1.10.x before 1.10.10 creates duplicate hashtables for a media channel, which allows remote attackers to cause a denial of service application crash via a crafted packet to the RTP dissector...
CVE-2014-6421: Undefined Security Weakness
Use-after-free vulnerability in the SDP dissector in Wireshark 1.10.x before 1.10.10 allows remote attackers to cause a denial of service application crash via a crafted packet that leverages split memory ownership between the SDP and RTP dissectors...
CVE-2014-6422: Improper Restriction of Operations within the Bounds of a Memory Buffer
The SDP dissector in Wireshark 1.10.x before 1.10.10 creates duplicate hashtables for a media channel, which allows remote attackers to cause a denial of service application crash via a crafted packet to the RTP dissector...
Asterisk 1.4 SIP T.38 SDP - Parsing Remote Stack Buffer Overflow Vulnerabilities (2)
No description provided by source. source: http://www.securityfocus.com/bid/23648/info Asterisk is prone to multiple remote stack-based buffer-overflow vulnerabilities because it fails to perform adequate boundary checks on user-supplied data before copying it to insufficiently sized buffers...
SDP Downloader 2.3.0 - (.ASX File) Local Heap Overflow PoC
No description provided by source. !/usr/bin/perl Found By : Cyber-Zone ABDELKHALEK == Proud To Be Figuigian ::Figuig City OwnZ ! MoroCCo 2009 GreatZ To : Hussin X , Jiko , ZoRLu , Mag!c ompo , Stack , b0rizQ ... All MoroCCaN HaCkerS OllyDBG Registers EAX 41414141 ECX 00AF74AC ASCII...
SDP Downloader 2.3.0 - (.ASX) Local Buffer Overflow Exploit (SEH) (2)
No description provided by source. / SDP-BOF.c SDP Downloader Local Buffer overflow exploit SEH Credits : Cyber-Zone Exploit BY : SimO-s0fT [email protected] Shoot to : Stack & r1z & Str0ke / include stdio.h include string.h include stdlib.h define OFFSET 529 define NOP 0x90 char...
SDP Downloader 2.3.0 - (.ASX) Local Buffer Overflow Exploit (SEH)
No description provided by source. usage: exploit.py xNote: In this case we have the problem of the safeseh, but if the machine uses idm and the option Use advanced browser integration is selected,then idmmbc.dll will be loaded the most of time. print print SDP Downloader v2.3.0 .ASX Local Buffer...
eStara SoftPhone 3.0.1 - SIP SDP Message Handling Format String DoS
No description provided by source. source: http://www.securityfocus.com/bid/16629/info eStara Smartphone is prone to multiple denial-of-service vulnerabilities when processing malformed VOIP headers. Successful exploitation will cause the device to crash. INVITE sip:[email protected] SIP/2.0 Via:...
SDP Downloader 2.3.0 - (http_response) Remote Buffer Overflow Exploit
No description provided by source. !/usr/bin/python Bug : SDP Downloader httpresponse Remote Buffer Overflow Exploit by: sup3r Tested on : Xp sp3 http://sdp.ppona.com/ from socket import win32exec - EXITFUNC=process CMD=calc Size=160 Encoder=PexFnstenvSub http://metasploit.com shellcode=...
xine-lib <= 1.1.9 'rmff_dump_cont()' Remote Heap Buffer Overflow Vulnerability
No description provided by source. source: http://www.securityfocus.com/bid/27198/info The xine-lib library is prone to a remote heap-based buffer-overflow vulnerability. This issue occurs because the software fails to perform adequate boundary checks on user-supplied data. An attacker can exploi...