Grandstream GXV-3000 电话远程拒绝服务安全漏洞

GXV-3000是潮流科技（Grandstream）基于SIP和H.264标准的下一代高级IP视频电话。 GXV-3000在处理特定的消息序列时存在漏洞，远程攻击者可能利用此漏洞导致设备不可用。 如果向GXV-3000电话发送了以下两个消息序列的话，就会导致设备拒绝服务： X ----------------------- INVITE ------------------- GXV-3000 X ------------------ 100 Trying ----------------- GXV-3000 X --------------- 180 Ringing...

CVE-2007-4291

Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service via 1 a malformed MGCP packet, which causes a device hang, aka CSCsf08998; a malformed H.323 packet, which causes a device crash, as identified by 2 CSCsi60004 with Proxy Unregistration and 3 CSCsg70474; and a...

Memory corruption

Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service via 1 a malformed MGCP packet, which causes a device hang, aka CSCsf08998; a malformed H.323 packet, which causes a device crash, as identified by 2 CSCsi60004 with Proxy Unregistration and 3 CSCsg70474; and a...

CVE-2007-4291

Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service via 1 a malformed MGCP packet, which causes a device hang, aka CSCsf08998; a malformed H.323 packet, which causes a device crash, as identified by 2 CSCsi60004 with Proxy Unregistration and 3 CSCsg70474; and a...

CVE-2007-4291

Cisco IOS 12.0–12.4 vulnerability CVE-2007-4291 allows remote attackers to cause denial of service via malformed MGCP packets (hang) or malformed H.323/RTP packets (crash), with specific identifiers CSCsf08998, CSCsi60004/CSCsg70474, CSCse68138, and CSCse05642. Affected components include VOIP RT...

[Full-disclosure] Cisco Security Advisory: Voice Vulnerabilities in Cisco IOS and Cisco Unified Communications Manager

Cisco Security Advisory: Voice Vulnerabilities in Cisco IOS and Cisco Unified Communications Manager Advisory ID: cisco-sa-20070808-IOS-voice http://www.cisco.com/warp/public/707/cisco-sa-20070808-IOS-voice.shtml Revision 1.0 For Public Release 2007 August 08 1600 UTC GMT -...

Cisco VoIP routers multiple DoS conditions

Multiple vulnerabilities in implementation of SIP, MGCP, H.323 and RTP protocols. Device may be vulnerable even i protocol is not configured...

Apple Quicktime信息泄露和代码执行漏洞

Apple QuickTime是一款流行的媒体播放程序。 Apple QuickTime存在多个安全问题，远程攻击者可以利用漏洞获得敏感信息或者执行任意代码。 CVE-ID: CVE-2007-2295： Apple QuickTime处理畸形H.264电影文件存在内存破坏问题，可导致任意代码执行或者拒绝服务。 CVE-ID: CVE-2007-2392： Apple QuickTime处理畸形电影文件存在内存破坏问题，可导致任意代码执行或者拒绝服务。 CVE-ID: CVE-2007-2296： Apple...

Unfixed XSS vulnerability at www.h-net.org

Security researcher Sc@ry, has submitted on 07/06/2007 a cross-site-scripting XSS vulnerability affecting www.h-net.org, which at the time of submission ranked 92460 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 08/06/2007. It is currently...

CVE-2007-3329

Multiple array index errors in the 1 getintrablock, 2 getinterblockh263, and 3 getinterblockmpeg functions in src/bitstream/mbcoding.c in Xvid 1.1.2 allow remote attackers to execute arbitrary code via a crafted a Avi, b H.263, or c MPEG file...

CVE-2007-3329

Multiple array index errors in the 1 getintrablock, 2 getinterblockh263, and 3 getinterblockmpeg functions in src/bitstream/mbcoding.c in Xvid 1.1.2 allow remote attackers to execute arbitrary code via a crafted a Avi, b H.263, or c MPEG file...

Design/Logic Flaw

Multiple array index errors in the 1 getintrablock, 2 getinterblockh263, and 3 getinterblockmpeg functions in src/bitstream/mbcoding.c in Xvid 1.1.2 allow remote attackers to execute arbitrary code via a crafted a Avi, b H.263, or c MPEG file...

CVE-2007-3329

Multiple array index errors in the 1 getintrablock, 2 getinterblockh263, and 3 getinterblockmpeg functions in src/bitstream/mbcoding.c in Xvid 1.1.2 allow remote attackers to execute arbitrary code via a crafted a Avi, b H.263, or c MPEG file...

CVE-2007-3329

Xvid 1.1.2 has array indexing vulnerabilities in mbcoding.c (get_intra_block, get_inter_block_h263, get_inter_block_mpeg) that allow remote code execution via crafted AVI/H.263/MPEG files; Gentoo GLSA 200708-02 recommends upgrading to >= xvid-1.1.3 as remediation. No exploitable details beyond...

CVE-2007-2633

Directory traversal vulnerability in H-Sphere SiteStudio 1.6 allows remote attackers to read, or include and execute, arbitrary local files via a .. dot dot in the template parameter...

Directory traversal

Directory traversal vulnerability in H-Sphere SiteStudio 1.6 allows remote attackers to read, or include and execute, arbitrary local files via a .. dot dot in the template parameter...

CVE-2007-2633

Directory traversal vulnerability in H-Sphere SiteStudio 1.6 allows remote attackers to read, or include and execute, arbitrary local files via a .. dot dot in the template parameter...

CVE-2007-2633

CVE-2007-2633 affects H-Sphere SiteStudio 1.6. The vulnerability is a directory traversal that allows remote attackers to read, or include and execute, arbitrary local files via a .. (dot dot) in the template parameter. The NVD entry assigns a base score of 10.0 (HIGH) with network attack vector,...

Heap overflow

Heap-based buffer overflow in the JVTCompEncodeFrame function in Apple Quicktime 7.1.5 and other versions before 7.2 allows remote attackers to execute arbitrary code via a crafted H.264 MOV file...

CVE-2007-2295

CVE-2007-2295 describes a heap-based buffer overflow in the QuickTime component JVTCompEncodeFrame used when processing malformed H.264 MOV files. Affected product: Apple QuickTime 7.1.5 and earlier versions up to 7.2. The underlying issue is insufficient bounds checking, which allows remote atta...