609 matches found
CVE-2015-6312
Cisco TelePresence Server 3.1 on 7010, Mobility Services Engine MSE 8710, Multiparty Media 310 and 320, and Virtual Machine VM devices allows remote attackers to cause a denial of service device reload via malformed STUN packets, aka Bug ID CSCuv01348...
CVE-2015-6312
Cisco TelePresence Server 3.1 (on 7010, MSE 8710, Multiparty Media 310/320 and VM devices) is affected by CVE-2015-6312 due to improper processing of malformed STUN packets. An unauthenticated, remote attacker could cause a denial of service by forcing the device to reload, which also disrupts on...
Cisco TelePresence Server Malformed STUN Packet Processing Denial of Service Vulnerability
A vulnerability in Cisco TelePresence Server devices running software version 3.1 could allow an unauthenticated, remote attacker to reload the device. The vulnerability exists due to a failure to properly process malformed Session Traversal Utilities for NAT STUN packets. An attacker could explo...
PT-2016-1640
Name of the Vulnerable Software and Affected Versions Cisco TelePresence Server version 3.1 Description The issue is caused by a buffer overflow in the Cisco TelePresence Server's software, allowing remote attackers to cause a denial of service device reload by sending malformed STUN packets...
CVE-2015-6312: Improper Restriction of Operations within the Bounds of a Memory Buffer
Cisco TelePresence Server 3.1 on 7010, Mobility Services Engine MSE 8710, Multiparty Media 310 and 320, and Virtual Machine VM devices allows remote attackers to cause a denial of service device reload via malformed STUN packets, aka Bug ID CSCuv01348...
Electric Stun Gun Joke - Dynamic Code Loading, External URLs, Native code usage vulnerabilities
HackApp vulnerability scanner discovered that application Electric Stun Gun Joke published at the 'play' market has multiple vulnerabilities...
Electric Stun Gun - Customized SSL, Dangerous filesystem permissions, Exported ContentProvider vulnerabilities
HackApp vulnerability scanner discovered that application Electric Stun Gun published at the 'play' market has multiple vulnerabilities...
Electric Stun Gun - MIT license, WebView code execution vulnerabilities
HackApp vulnerability scanner discovered that application Electric Stun Gun published at the 'play' market has multiple vulnerabilities...
Pidgin libpurple STUN Response Length NULL Write Vulnerability
Talos Vulnerability Report VRT-2014-0202 Pidgin libpurple STUN Response Length NULL Write Vulnerability May 11, 2015 Description A exploitable NULL write vulnerability exists in Pidgin’s implementation of the STUN protocol in the libpurple library. An attacker who can control the response to a ST...
openSUSE Security Update : seamonkey (openSUSE-2015-250)
SeaMonkey was updated to 2.33 bnc917597 - MFSA 2015-11/CVE-2015-0835/CVE-2015-0836 Miscellaneous memory safety hazards - MFSA 2015-12/CVE-2015-0833 bmo945192 Invoking Mozilla updater will load locally stored DLL files Windows only - MFSA 2015-13/CVE-2015-0832 bmo1065909 Appended period to hostnam...
FreeBSD : mozilla -- multiple vulnerabilities (99029172-8253-407d-9d8b-2cfeab9abf81)
The Mozilla Project reports : MFSA-2015-11 Miscellaneous memory safety hazards rv:36.0 / rv:31.5 MFSA-2015-12 Invoking Mozilla updater will load locally stored DLL files MFSA-2015-13 Appended period to hostnames can bypass HPKP and HSTS protections MFSA-2015-14 Malicious WebGL content crash when...
Code injection
The WebRTC subsystem in Mozilla Firefox before 36.0 recognizes turns: and stuns: URIs but accesses the TURN or STUN server without using TLS, which makes it easier for man-in-the-middle attackers to discover credentials by spoofing a server and completing a brute-force attack within a short time...
CVE-2015-0834
The WebRTC subsystem in Mozilla Firefox before 36.0 recognizes turns: and stuns: URIs but accesses the TURN or STUN server without using TLS, which makes it easier for man-in-the-middle attackers to discover credentials by spoofing a server and completing a brute-force attack within a short time...
TLS TURN and STUN connections silently fail to simple TCP connections — Mozilla
Security researcher Alexander Kolesnik reported while the Mozilla platform does not yet support TLS connections to TURN and STUN servers, the WebRTC implementation would accept turns: and stuns: URIs and then attempt plaintext connections to the servers when these were used. This can lead to...
PT-2015-4903
Name of the Vulnerable Software and Affected Versions Mozilla Firefox versions prior to 36.0 Description The issue concerns the WebRTC subsystem in Mozilla Firefox, which recognizes turns: and stuns: URIs but accesses the TURN or STUN server without using TLS. This makes it easier for...
WebRTC Found Leaking Local IP Addresses
A recently publicized hole in WebRTC, a protocol for web communication, is revealing the local IP addresses of users, even those who go to extra lengths to hide theirs by using a virtual private network. Daniel Roesler, a San Francisco-based researcher who’s dabbled in encryption, posted a...
WebRTC Vulnerability leaks Real IP Addresses of VPN Users
An extremely critical vulnerability has recently been discovered in WebRTC Web Real-Time Communication, an open-source standard that enables the browsers to make voice or video calls without needing any plug-ins. AFFECTED PRODUCTS Late last month, security researchers revealed a massive security...
Oracle Solaris Third-Party Patch Update : wireshark (multiple_vulnerabilities_in_wireshark3)
The remote Solaris system is missing necessary patches to address security updates : - The dissectpft function in epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of...