5973 matches found
CVE-2015-6241
The prototreeaddbytesitem function in epan/proto.c in the protocol-tree implementation in Wireshark 1.12.x before 1.12.7 does not properly terminate a data structure after a failure to locate a number within a string, which allows remote attackers to cause a denial of service application crash vi...
DEBIAN-CVE-2015-6241
The prototreeaddbytesitem function in epan/proto.c in the protocol-tree implementation in Wireshark 1.12.x before 1.12.7 does not properly terminate a data structure after a failure to locate a number within a string, which allows remote attackers to cause a denial of service application crash vi...
CVE-2015-6241
The prototreeaddbytesitem function in epan/proto.c in the protocol-tree implementation in Wireshark 1.12.x before 1.12.7 does not properly terminate a data structure after a failure to locate a number within a string, which allows remote attackers to cause a denial of service application crash vi...
CVE-2015-6241
The prototreeaddbytesitem function in epan/proto.c in the protocol-tree implementation in Wireshark 1.12.x before 1.12.7 does not properly terminate a data structure after a failure to locate a number within a string, which allows remote attackers to cause a denial of service application crash vi...
CVE-2015-6241
Wireshark 1.12.x before 1.12.7 is vulnerable to CVE-2015-6241 due to proto_tree_add_bytes_item not terminating a data structure after failing to locate a number in a string, enabling remote crafted packets to cause a denial of service (crash). The issue affects the protocol-tree code in epan/prot...
Wireshark Protocol Tree Handling Denial of Service Vulnerability
Wireshark is an open source protocol analysis program. Wireshark handles protocol tree entries add there are security holes that allow attackers to exploit vulnerabilities to crash applications...
Adobe Flash - Bad Write in XML When Callback Modifies XML Tree During Property Delete
Source: https://code.google.com/p/google-security-research/issues/detail?id=404&can=1&q=label%3AProduct-Flash%20modified-after%3A2015%2F8%2F17&sort=id Source file and compiled PoC attached. Looking at https://github.com/adobe-flash/avmplus/blob/master/core/XMLListObject.cpp: bool...
Wireshark 1.12.x < 1.12.7 Multiple Vulnerabilities (macOS)
The version of Wireshark installed on the remote macOS / Mac OS X host is prior to 1.12.7. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.12.7 advisory. - Wireshark could crash when adding an item to the protocol tree. It may be possible to make Wireshark...
Wireshark 1.12.x < 1.12.7 Multiple Vulnerabilities
The version of Wireshark installed on the remote Windows host is prior to 1.12.7. It is, therefore, affected by multiple vulnerabilities as referenced in the wireshark-1.12.7 advisory. - Wireshark could crash when adding an item to the protocol tree. It may be possible to make Wireshark crash by...
PT-2015-7130
Name of the Vulnerable Software and Affected Versions Wireshark versions 1.12.x through 1.12.6 Description The issue is related to the proto tree add bytes item function in the protocol-tree implementation. It does not properly terminate a data structure after a failure to locate a number within ...
chromium-browser: Use-after-free in accessibility.
Use-after-free vulnerability in the accessibility implementation in Google Chrome before 44.0.2403.89 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging lack of certain validity checks for accessibility-tree data structures...
CVE-2015-1277: Undefined Security Weakness
Use-after-free vulnerability in the accessibility implementation in Google Chrome before 44.0.2403.89 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging lack of certain validity checks for accessibility-tree data structures...
CVE-2015-1277
Use-after-free vulnerability in the accessibility implementation in Google Chrome before 44.0.2403.89 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging lack of certain validity checks for accessibility-tree data structures...
CVE-2015-1277
Use-after-free vulnerability in the accessibility implementation in Google Chrome before 44.0.2403.89 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging lack of certain validity checks for accessibility-tree data structures...
UBUNTU-CVE-2015-1277
Use-after-free vulnerability in the accessibility implementation in Google Chrome before 44.0.2403.89 allows remote attackers to cause a denial of service or possibly have unspecified other impact by leveraging lack of certain validity checks for accessibility-tree data structures...
CVE-2015-4760
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality, integrity, and availability via unknown vectors related to 2D...
CVE-2015-2632
Unspecified vulnerability in Oracle Java SE 6u95, 7u80, and 8u45 allows remote attackers to affect confidentiality via unknown vectors related to 2D...
chromium-browser: Use-after-free in SVG.
Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 43.0.2357.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document that leverages improper handling of a shadow tree for a use element...
Design/Logic Flaw
Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 43.0.2357.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document that leverages improper handling of a shadow tree for a use element...
CVE-2015-1256
Use-after-free vulnerability in the SVG implementation in Blink, as used in Google Chrome before 43.0.2357.65, allows remote attackers to cause a denial of service or possibly have unspecified other impact via a crafted document that leverages improper handling of a shadow tree for a use element...