Design/Logic Flaw

OpenTTD 0.3.5 through 1.1.4 allows remote attackers to cause a denial of service game pause by connecting to the server and not finishing the 1 authorization phase or 2 map download, aka a "slow read" attack...

CVE-2012-0048

OpenTTD 0.3.5 through 1.1.4 allows remote attackers to cause a denial of service game pause by connecting to the server and not finishing the 1 authorization phase or 2 map download, aka a "slow read" attack...

CVE-2012-0048: Undefined Security Weakness

OpenTTD 0.3.5 through 1.1.4 allows remote attackers to cause a denial of service game pause by connecting to the server and not finishing the 1 authorization phase or 2 map download, aka a "slow read" attack...

Fedora 17 : redeclipse-1.2-12.fc17 (2012-11582)

A flaw was found in the way Red Eclipse handled config files. In cube2-engine games, game maps can be transmitted either from the server to a client, or from client to client. These maps include a config file mapname.cfg in 'cubescript' format, which allows for an attacker to send a malicious...

[SECURITY] Fedora 17 Update: redeclipse-1.2-12.fc17

A single-player and multi-player first-person ego-shooter, built on Cube Engine 2, which lends itself toward a balanced gameplay, completely at the control of map makers, while maintaining a general theme of agility in a variety of environments. Features: Balanced gameplay, with a general theme o...

Scientific Linux Security Update : autofs on SL5.x i386/x86_64

There was a security issue with the default installed configuration of autofs version 5 whereby the entry for the 'hosts' map did not specify the 'nosuid' mount option. A local user with control of a remote nfs server could create a setuid root executable within an exported filesystem on the remo...

Scientific Linux Security Update : samba on SL5.x, SL4.x, SL3.x i386/x86_64

Various bugs were found in NDR parsing, used to decode MS-RPC requests in Samba. A remote attacker could have sent carefully crafted requests causing a heap overflow, which may have led to the ability to execute arbitrary code on the server. CVE-2007-2446 Unescaped user input parameters were bein...

Scientific Linux Security Update : squid on SL5.x i386/x86_64

A flaw was found in the way Squid processed certain external ACL helper HTTP header fields that contained a delimiter that was not a comma. A remote attacker could issue a crafted request to the Squid server, causing excessive CPU use up to 100%. CVE-2009-2855 Note: The CVE-2009-2855 issue only...

icedtea-web: getvalueforurl uninitialized instance pointer

The getFirstInTableInstance function in the IcedTea-Web plugin before 1.2.1 returns an uninitialized pointer when the instancetoidmap hash is empty, which allows remote attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted web page, which causes an...

CVE-2012-1661

ESRI ArcMap 9 and ArcGIS 10.0.2.3200 and earlier does not properly prompt users before executing embedded VBA macros, which allows user-assisted remote attackers to execute arbitrary VBA code via a crafted map .mxd file...

CVE-2012-1661: Improper Control of Generation of Code

ESRI ArcMap 9 and ArcGIS 10.0.2.3200 and earlier does not properly prompt users before executing embedded VBA macros, which allows user-assisted remote attackers to execute arbitrary VBA code via a crafted map .mxd file...

PT-2012-3425 · Esri · Esri Arcgis +1

Name of the Vulnerable Software and Affected Versions: ESRI ArcMap version 9 ESRI ArcGIS versions 10.0.2.3200 and earlier Description: The issue allows user-assisted remote attackers to execute arbitrary VBA code via a crafted map .mxd file, due to the software not properly prompting users before...

Wireshark Multiple Denial of Service Vulnerabilities (Jul 2012) - Mac OS X

Wireshark is prone to multiple denial of service vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Wireshark Multiple Denial of Service Vulnerabilities (Jul 2012) - Windows

Wireshark is prone to multiple denial of service vulnerabilities. SPDX-FileCopyrightText: 2012 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

CVE-2012-2392

Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allows remote attackers to cause a denial of service infinite loop via vectors related to the 1 ANSI MAP, 2 ASF, 3 IEEE 802.11, 4 IEEE 802.3, and 5 LTP dissectors...

CVE-2012-2392

Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allows remote attackers to cause a denial of service infinite loop via vectors related to the 1 ANSI MAP, 2 ASF, 3 IEEE 802.11, 4 IEEE 802.3, and 5 LTP dissectors...

CVE-2012-2392: Undefined Security Weakness

Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 allows remote attackers to cause a denial of service infinite loop via vectors related to the 1 ANSI MAP, 2 ASF, 3 IEEE 802.11, 4 IEEE 802.3, and 5 LTP dissectors...

PT-2012-4005

Name of the Vulnerable Software and Affected Versions Wireshark versions 1.4.x through 1.4.12 Wireshark versions 1.6.x through 1.6.7 Description The issue allows remote attackers to cause a denial of service, resulting in an infinite loop. This is related to vectors in the 1 ANSI MAP, 2 ASF, 3 IE...

Design/Logic Flaw

The Reliable Datagram Sockets RDS subsystem in the Linux kernel before 2.6.38 does not properly handle congestion map updates, which allows local users to cause a denial of service BUGON and system crash via vectors involving 1 a loopback aka loop transmit operation or 2 an InfiniBand aka ib...

CVE-2011-1023

The Reliable Datagram Sockets RDS subsystem in the Linux kernel before 2.6.38 does not properly handle congestion map updates, which allows local users to cause a denial of service BUGON and system crash via vectors involving 1 a loopback aka loop transmit operation or 2 an InfiniBand aka ib...