CVE-2013-4924

epan/dissectors/packet-dcom-sysact.c in the DCOM ISystemActivator dissector in Wireshark 1.10.x before 1.10.1 does not properly validate certain index values, which allows remote attackers to cause a denial of service assertion failure and application exit via a crafted packet...

CVE-2013-4926

epan/dissectors/packet-dcom-sysact.c in the DCOM ISystemActivator dissector in Wireshark 1.10.x before 1.10.1 does not properly determine whether there is remaining packet data to process, which allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2013-4923

Wireshark 1.10.x is affected by CVE-2013-4923 due to a memory leak in dissect_dcom_ActivationProperties (DCOM ISystemActivator dissector). This memory leak can cause a denial of service through memory consumption when processing crafted packets; a fix is available in Wireshark 1.10.1 (or newer) p...

CVE-2013-4925

CVE-2013-4925 is a Wireshark vulnerability (Wireshark 1.10.x prior to 1.10.1) caused by an integer signedness error in epan/dissectors/packet-dcom-sysact.c (DCOM ISystemActivator dissector). The issue allows remote attackers to trigger a denial of service via a crafted packet, resulting in an ass...

CVE-2013-4924

epan/dissectors/packet-dcom-sysact.c in the DCOM ISystemActivator dissector in Wireshark 1.10.x before 1.10.1 does not properly validate certain index values, which allows remote attackers to cause a denial of service assertion failure and application exit via a crafted packet...

CVE-2013-4926

epan/dissectors/packet-dcom-sysact.c in the DCOM ISystemActivator dissector in Wireshark 1.10.x before 1.10.1 does not properly determine whether there is remaining packet data to process, which allows remote attackers to cause a denial of service application crash via a crafted packet...

CVE-2013-4925

Integer signedness error in epan/dissectors/packet-dcom-sysact.c in the DCOM ISystemActivator dissector in Wireshark 1.10.x before 1.10.1 allows remote attackers to cause a denial of service assertion failure and daemon exit via a crafted packet...

CVE-2013-4926

CVE-2013-4926 affects Wireshark’s DCOM ISystemActivator dissector (epan/dissectors/packet-dcom-sysact.c). The vulnerability: it does not correctly determine if there is remaining packet data to process in Wireshark 1.10.x before 1.10.1, enabling a remote attacker to cause a denial of service (app...

CVE-2013-4925

Integer signedness error in epan/dissectors/packet-dcom-sysact.c in the DCOM ISystemActivator dissector in Wireshark 1.10.x before 1.10.1 allows remote attackers to cause a denial of service assertion failure and daemon exit via a crafted packet...

CVE-2013-4923

Memory leak in the dissectdcomActivationProperties function in epan/dissectors/packet-dcom-sysact.c in the DCOM ISystemActivator dissector in Wireshark 1.10.x before 1.10.1 allows remote attackers to cause a denial of service memory consumption via crafted packets...

Microsoft RPC DCOM Interface - Remote Overflow (MS03-026) (Metasploit)

$Id: ms03026dcom.rb 11545 2011-01-11 17:56:27Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/...

Microsoft NetDDE Service Overflow

$Id$ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Microsoft...

Microsoft Windows Schannel Security Package Code Execution (MS07-031; CVE-2007-2218)

The Secure Channel Schannel security package supports multiple public-key-based protocols, such as SSL Secure Sockets Layer versions 2.0 and 3.0, Transport Layer Security TLS 1.0, and Private Communication Technology PCT 1.0. When the Schannel security package is used, DCOM automatically negotiat...

MS Windows (DCOM RPC2) Universal Shellcode

No description provided by source. ; Segment type: Pure code ;seg000 segment byte public 'CODE' use32 ; assume cs:seg000 ; assume es:nothing, ss:nothing, ds:nothing, fs:nothing, gs:nothing .386 assume cs:seg000 var29C = byte ptr -29Ch var28C = byte ptr -28Ch var25F = byte ptr -25Fh var254 = dword...

Blaster Attacks (CVE-2003-0352)

Buffer overflow in a certain DCOM interface for RPC in Microsoft Windows NT 4.0, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a malformed message, as exploited by the Blaster, MSblast, LovSAN, Nachi, and Welchia worms...

Microsoft Windows DCOM RPC Interface Buffer Overflow (MS03-026; CVE-2003-0352; CVE-2003-0715)

Heap-based buffer overflow in the Distributed Component Object Model DCOM interface in the RPCSS Service allows remote attackers to execute arbitrary code. This is done via a malformed DCERPC DCOM object activation request packet with modified length fields...

Unauthenticated DCOM SystemActivation/RemoteActivation traffic (CVE-2003-0352; CVE-2003-0605; CVE-2003-0715)

There are several known and widely exploited vulnerabilities through the use of DCOM over MS-RPC. There are cases in which certain traffic, although not intended for malicious use, is very unsafe, since it may transfer shellcode which is undetectable by IPS...

MS04-012: Cumulative Update for Microsoft RPC/DCOM (828741) (uncredentialed check)

The remote host has multiple bugs in its RPC/DCOM implementation 828741. An attacker may exploit one of these flaws to execute arbitrary code on the remote system. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid21655; scriptversion"1.25"; scriptcvsdate"Date: 2018/11/...

Security Best Practice: Protect Yourself from DCOM vulnerabilities

The Distributed Component Object Model DCOM is a protocol that enables software components to communicate directly over a network. Previously called "Network OLE," DCOM is designed for use across multiple network transports, including Internet protocols such as HTTP.There are several known and...

Windows RPC DCOM interface buffer overflow

Added: 04/04/2006 CVE: CVE-2003-0352 BID: 8205 OSVDB: 2100 Background The Distributed Component Object Model is a technology in Microsoft Windows operating systems which allows software components to communicate. Remote Procedure Call RPC is a protocol used to request a service from a program on...