CVE-2011-2895

The LZW decompressor in 1 the BufCompressedFill function in fontfile/decompress.c in X.Org libXfont before 1.4.4 and 2 compress/compress.c in 4.3BSD, as used in zopen.c in OpenBSD before 3.8, FreeBSD, NetBSD 4.0.x and 5.0.x before 5.0.3 and 5.1.x before 5.1.1, FreeType 2.1.9, and other products,...

Oracle Java Soundbank Decompression Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Oracle Java. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the way Java parses...

Wireshark Multiple Denial of Service Vulnerabilities (Windows)

This host is installed with Wireshark and is prone to multiple denial of service vulnerabilities. OpenVAS Vulnerability Test $Id: gbwiresharkmultdosvulnwinjun11.nasl 7052 2017-09-04 11:50:51Z teissa $ Wireshark Multiple Denial of Service Vulnerabilities Windows Authors: Sooraj KS Copyright:...

Mandriva Update for wireshark MDVSA-2011:105 (wireshark)

Check for the Version of wireshark OpenVAS Vulnerability Test Mandriva Update for wireshark MDVSA-2011:105 wireshark Authors: System Generated Check Copyright: Copyright c 2011 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

Wireshark < 1.2.17 / 1.4.7 Multiple DoS Vulnerabilities

The installed version of Wireshark is 1.2.x less than 1.2.17 or 1.4.x less than 1.4.7. As such, it is affected by the following vulnerabilities : - An error exists in DICOM dissector that can allow denial of service attacks when processing certain malformed packets. Issue 5876 - An error exists i...

[ MDVSA-2011:105 ] wireshark

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDVSA-2011:105 http://www.mandriva.com/security/ Package : wireshark Date : June 1, 2011 Affected: 2010.1, Corporate 4.0, Enterprise Server 5.0 Problem Description: This advisory updates wireshark to the latest version...

Mandriva Linux Security Advisory : wireshark (MDVSA-2011:105)

This advisory updates wireshark to the latest version 1.2.17, fixing several security issues : - Large/infinite loop in the DICOM dissector. Bug 5876 Versions affected: 1.2.0 to 1.2.16 and 1.4.0 to 1.4.6. - Huzaifa Sidhpurwala of the Red Hat Security Response Team discovered that a corrupted...

Wireshark: Multiple stack consumption vulnerabilities caused DoS via crafted SMB or CLDAP packet

Multiple stack consumption vulnerabilities in the dissectmscompressedstring and dissectmscldapstring functions in Wireshark 1.0.x, 1.2.0 through 1.2.14, and 1.4.0 through 1.4.3 allow remote attackers to cause a denial of service infinite recursion via a crafted 1 SMB or 2 Connection-less LDAP CLD...

PT-2011-2899

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.0.x, 1.2.0 through 1.2.14, 1.4.0 through 1.4.3 Description The issue allows remote attackers to cause a denial of service via a crafted packet. This can be achieved by exploiting the dissect ms compressed string and dissec...

Heap overflow

The Bitmap parsing component in 2d.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via an image with crafted 1 height and 2 width values for an RLE8 compressed bitmap, which trigger...

CVE-2011-0596: Improper Input Validation

The Bitmap parsing component in 2d.dll in Adobe Reader and Acrobat 10.x before 10.0.1, 9.x before 9.4.2, and 8.x before 8.2.6 on Windows and Mac OS X allow remote attackers to execute arbitrary code via an image with crafted 1 height and 2 width values for an RLE8 compressed bitmap, which trigger...

Adobe Reader BMP ColorData Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The flaw exists within the Bitmap parsing component...

Adobe Acrobat Reader U3D Texture .fli RLE Decompression Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Adobe Acrobat Reader. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the...

Wireshark ENTTEC DMX Data RLE Buffer Overflow Vulnerability (Windows)

This host is installed with Wireshark and is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbwiresharkenttecdmxdatarlebofvulnwin.nasl 7019 2017-08-29 11:51:27Z teissa $ Wireshark ENTTEC DMX Data RLE Buffer Overflow Vulnerability Windows Authors: Sooraj KS Copyright:...

Wireshark ENTTEC DMX Data RLE Buffer Overflow Vulnerability - Windows

Wireshark is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:wireshark:wireshark";...

Fedora 14 : java-1.6.0-openjdk-1.6.0.0-50.1.9.4.fc14 (2011-0521)

Wed Jan 5 2011 Jiri Vanek - 1:1.6.0.0-50.1.9.4 - Updated to IcedTea 1.9.4 - Wed Dec 1 2010 Deepak Bhole - 1:1.6.0.0-49.1.9.3 - Updated to IcedTea 1.9.3 - Re-enable Compressed Oops by default as upstream bug 7002666 is fixed - Tue Nov 30 2010 Deepak Bhole - 1:1.6.0.0-49.1.9.2 - Update to IcedTea...

CVE-2011-0015

Tor before 0.2.1.29 and 0.2.2.x before 0.2.2.21-alpha does not properly check the amount of compression in zlib-compressed data, which allows remote attackers to cause a denial of service via a large compression factor...

PT-2011-2013

Name of the Vulnerable Software and Affected Versions Tor versions prior to 0.2.1.29 Tor versions 0.2.2.x prior to 0.2.2.21-alpha Description The issue arises from improper checking of the amount of compression in zlib-compressed data, allowing remote attackers to cause a denial of service via a...

CVE-2010-4054

The gstype2interpret function in Ghostscript allows remote attackers to cause a denial of service incorrect pointer dereference and application crash via crafted font data in a compressed data stream, aka bug 691043...

DEBIAN-CVE-2010-4054

The gstype2interpret function in Ghostscript allows remote attackers to cause a denial of service incorrect pointer dereference and application crash via crafted font data in a compressed data stream, aka bug 691043...