3577 matches found
Cisco Nexus 7000 M1-Series Modules Crafted Packet Vulnerability
Cisco Nexus 7000 M1-Series Modules contain a vulnerability that could allow an unauthenticated, remote attacker to cause a denial of service DoS condition. The vulnerability is due to incorrect handling of crafted packets processed by the affected software. An unauthenticated, remote attacker cou...
DoS vulnerability in Siemens S7-1200 PLCs
Hi all, I have found a DoS vulnerability in the Siemens S7-1200 PLCs. It is present in firmware versions 2 and 3. After an exchange of specially crafted packets to TCP port 102 the PLC shuts down. The red, green and yellow status LEDs start flashing. All outputs are shut off. The device stops...
CVE-2012-6129
Stack-based buffer overflow in utp.cpp in libutp, as used in Transmission before 2.74 and possibly other products, allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via crafted "micro transport protocol packets."...
CVE-2012-4691
Memory leak in Siemens Automation License Manager ALM 4.x and 5.x before 5.2 allows remote attackers to cause a denial of service memory consumption via crafted packets...
Memory corruption
Memory leak in Siemens Automation License Manager ALM 4.x and 5.x before 5.2 allows remote attackers to cause a denial of service memory consumption via crafted packets...
CVE-2012-4691
Memory leak in Siemens Automation License Manager ALM 4.x and 5.x before 5.2 allows remote attackers to cause a denial of service memory consumption via crafted packets...
UBUNTU-CVE-2012-6062
The dissectrtcpapp function in epan/dissectors/packet-rtcp.c in the RTCP dissector in Wireshark 1.6.x before 1.6.12 and 1.8.x before 1.8.4 allows remote attackers to cause a denial of service infinite loop via a crafted packet...
UBUNTU-CVE-2012-6061
The dissectwtpcommon function in epan/dissectors/packet-wtp.c in the WTP dissector in Wireshark 1.6.x before 1.6.12 and 1.8.x before 1.8.4 uses an incorrect data type for a certain length field, which allows remote attackers to cause a denial of service integer overflow and infinite loop via a...
HP LoadRunner < 11.00 Patch 4 Code Execution (intrusive check)
The version of HP LoadRunner hosted on the remote Windows host is potentially affected by a code execution vulnerability. The application fails to properly handle incoming packets with '0x00000000' as the first 32-bit value. A remote, unauthenticated attacker, exploiting this flaw, could execute...
kernel: sfc: potential remote denial of service through TCP MSS option
The sfc aka Solarflare Solarstorm driver in the Linux kernel before 3.2.30 allows remote attackers to cause a denial of service DMA descriptor consumption and network-controller outage via crafted TCP packets that trigger a small MSS value...
PT-2012-5533 · Cisco · Cisco Asa Services Module +3
Name of the Vulnerable Software and Affected Versions: Cisco Adaptive Security Appliances ASA 5500 series devices versions 8.3 before 8.32.25 Cisco Adaptive Security Appliances ASA 5500 series devices versions 8.4 before 8.42.5 Cisco Adaptive Security Appliances ASA 5500 series devices versions 8...
CVE-2012-2526
The Remote Desktop Protocol RDP implementation in Microsoft Windows XP SP3 does not properly process packets in memory, which allows remote attackers to execute arbitrary code by sending crafted RDP packets triggering access to a deleted object, aka "Remote Desktop Protocol Vulnerability."...
CVE-2012-2526
The Remote Desktop Protocol RDP implementation in Microsoft Windows XP SP3 does not properly process packets in memory, which allows remote attackers to execute arbitrary code by sending crafted RDP packets triggering access to a deleted object, aka "Remote Desktop Protocol Vulnerability."...
MS12-053: Vulnerability in Remote Desktop Could Allow Remote Code Execution (2723135)
An arbitrary remote code vulnerability exists in the implementation of the Remote Desktop Protocol RDP on the remote Windows host. The vulnerability is due to the way that RDP accesses an object in memory that has been deleted. If RDP has been enabled on the affected system, an unauthenticated,...
UBUNTU-CVE-2012-2978
query.c in NSD 3.0.x through 3.0.8, 3.1.x through 3.1.1, and 3.2.x before 3.2.12 allows remote attackers to cause a denial of service NULL pointer dereference and child process crash via a crafted DNS packet...
CVE-2012-4048
The PPP dissector in Wireshark 1.4.x before 1.4.14, 1.6.x before 1.6.9, and 1.8.x before 1.8.1 allows remote attackers to cause a denial of service invalid pointer dereference and application crash via a crafted packet, as demonstrated by a usbmon dump...
CVE-2012-2607
The Johnson Controls CK721-A controller with firmware before SSM438803.1.0.14BB allows remote attackers to perform arbitrary actions via crafted packets to TCP port 41014 aka the download port...
Design/Logic Flaw
The Johnson Controls CK721-A controller with firmware before SSM438803.1.0.14BB allows remote attackers to perform arbitrary actions via crafted packets to TCP port 41014 aka the download port...
CVE-2012-4026
The Johnson Controls Pegasys P2000 server with software before 3.11 allows remote attackers to trigger false alerts via crafted packets to TCP port 41013 aka the upload port, a different vulnerability than CVE-2012-2607...