PT-2012-5003

Name of the Vulnerable Software and Affected Versions Pro-face WinGP PC Runtime versions 3.1.00 and earlier Pro-face Pro-Server EX versions 1.30.000 and earlier Description The issue allows remote attackers to cause a denial of service, resulting in a daemon crash. This is achieved by sending a...

PT-2012-5004

Name of the Vulnerable Software and Affected Versions Pro-face WinGP PC Runtime versions 3.1.00 and earlier Pro-face Pro-Server EX versions 1.30.000 and earlier Description The issue allows remote attackers to cause a denial of service, resulting in an unhandled exception and daemon crash. This i...

CVE-2012-3792: Improper Restriction of Operations within the Bounds of a Memory Buffer

Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows remote attackers to cause a denial of service out-of-bounds read operation via a crafted packet that triggers a certain Find Node check attempt...

CVE-2012-3797: Improper Restriction of Operations within the Bounds of a Memory Buffer

Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, does not properly check packet sizes before reusing packet memory buffers, which allows remote attackers to cause a denial of service heap memory corruption or possibly have unspecified...

PT-2012-5002

Name of the Vulnerable Software and Affected Versions Pro-face WinGP PC Runtime versions 3.1.00 and earlier Pro-face Pro-Server EX versions 1.30.000 and earlier Description The issue allows remote attackers to cause a denial of service via a crafted packet, triggering a certain Find Node check...

CVE-2012-3794: Improper Restriction of Operations within the Bounds of a Memory Buffer

Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows remote attackers to cause a denial of service unhandled exception and daemon crash via a crafted packet with a certain opcode that triggers an invalid attempt to allocate a large...

CVE-2012-3793: Improper Restriction of Operations within the Bounds of a Memory Buffer

Integer overflow in Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows remote attackers to cause a denial of service daemon crash via a crafted packet with a certain opcode that triggers an incorrect memory allocation and a buffer...

PT-2012-5005

Name of the Vulnerable Software and Affected Versions Pro-face WinGP PC Runtime versions 3.1.00 and earlier Pro-face Pro-Server EX versions 1.30.000 and earlier Description The issue allows remote attackers to cause a denial of service, resulting in a daemon crash. This can be achieved by sending...

CVE-2012-3795: Improper Restriction of Operations within the Bounds of a Memory Buffer

Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows remote attackers to cause a denial of service daemon crash via a crafted packet with a certain opcode and a large value in a size field...

CVE-2012-3796: Exposure of Sensitive Information to an Unauthorized Actor

Pro-face WinGP PC Runtime 3.1.00 and earlier, and ProServr.exe in Pro-face Pro-Server EX 1.30.000 and earlier, allows remote attackers to obtain sensitive information from daemon memory via a crafted packet with a certain opcode...

PT-2012-5006

Name of the Vulnerable Software and Affected Versions Pro-face WinGP PC Runtime versions 3.1.00 and earlier Pro-face Pro-Server EX versions 1.30.000 and earlier Description The issue allows remote attackers to obtain sensitive information from daemon memory by sending a crafted packet with a...

PT-2012-5007

Name of the Vulnerable Software and Affected Versions Pro-face WinGP PC Runtime versions 3.1.00 and earlier Pro-face Pro-Server EX versions 1.30.000 and earlier Description The issue is related to improper checking of packet sizes before reusing packet memory buffers. This allows remote attackers...

Pro-face Pro-Server EX WinGP PC Runtime - Multiple Vulnerabilities

Luigi Auriemma Application: Pro-face Pro-Server EX WinGP PC Runtime http://www.profaceamerica.com/cms/resourcelibrary/products/9e3c2a7965a27592/index.html Versions: ProServr = 1.30.000 PCRuntime = 3.1.00 Platforms: Windows Bug: A "Find Node" invalid memory access B memset integer overflow C...

Pro-face Pro-Server EX WinGP PC Runtime - Multiple Vulnerabilities

Pro-face Pro-Server EX WinGP PC Runtime - Multiple Vulnerabilities Luigi Auriemma Application: Pro-face Pro-Server EX WinGP PC Runtime http://www.profaceamerica.com/cms/resourcelibrary/products/9e3c2a7965a27592/index.html Versions: ProServr = 1.30.000 PCRuntime = 3.1.00 Platforms: Windows Bug: A...

Fedora Update for drupal7-ctools FEDORA-2012-5094

Check for the Version of drupal7-ctools OpenVAS Vulnerability Test Fedora Update for drupal7-ctools FEDORA-2012-5094 Authors: System Generated Check Copyright: Copyright c 2012 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify i...

Pro-Face Pro-Server EX Vulnerabilities

Overview This advisory is a follow-up to the alert titled “ICS-ALERT-12-137-01 Pro-face Pro-Server EX Vulnerabilities,” that was published May 16, 2012, on the ICS-CERT Web page. Independent researcher Luigi Auriemma identified multiple vulnerabilities in the Pro-face Pro-Server EX application an...

F*EX 20111129-2 Cross Site Scripting Vulnerability

------------------------------------------------------------------------ FEX 20111129-2 Cross Site Scripting Vulnerability ------------------------------------------------------------------------ title.............: FEX 20111129-2 Cross Site Scripting Vulnerabilities author............: muuratsal...

F*EX 20111129-2 Cross Site Scripting

------------------------------------------------------------------------ FEX 20111129-2 Cross Site Scripting Vulnerability ------------------------------------------------------------------------ title.............: FEX 20111129-2 Cross Site Scripting Vulnerabilities author............: muuratsal...

F*EX 20100208/20111129-2 - Multiple Cross-Site Scripting Vulnerabilities

source: https://www.securityfocus.com/bid/52085/info FEX is prone to multiple cross-site scripting vulnerabilities because it fails to sufficiently sanitize user-supplied data. Exploiting these issues could allow an attacker to execute arbitrary script on the affected server and steal cookie-base...

F*EX 20100208 Cross Site Scripting

------------------------------------------------------------------------ FEX = 20100208 Cross Site Scripting Vulnerabilities ------------------------------------------------------------------------ title.............: FEX = 20100208 Cross Site Scripting Vulnerabilities author............:...