Wireshark < 0.99.6 - Mms Remote Denial of Service

include include pragma commentlib, "ws232" char http = "POST / HTTP/1.0\r\n" "Content-Type: application/vnd.wap.mms-message\r\n"; char hoststr = "Host: %s:%d\r\n"; char contentlenstr = "Content-Length: %d\r\n\r\n"; unsigned char mms = 0x8c,0x80,//X-Mms-Message-Type: m-send-req0x80...

Debian DSA-1322-1 : wireshark - several vulnerabilities

Several remote vulnerabilities have been discovered in the Wireshark network traffic analyzer, which may lead to denial of service. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-3390 Off-by-one overflows were discovered in the iSeries dissector. -...

Wireshark多个协议处理模块远程拒绝服务漏洞

BUGTRAQ ID: 24662 CVECAN ID: CVE-2007-3389,CVE-2007-3390,CVE-2007-3391,CVE-2007-3392,CVE-2007-3393 Wireshark以前名为Ethereal，是一款非常流行的网络协议分析工具。 Wireshark的多个协议解析模块实现上存在漏洞，远程攻击者可能利用此漏洞导致控制用户机器。 如果处理了HTTP响应中的分块编码、特制iSeries抓包文件、畸形DCP...

DSA-1322-1 wireshark

Bulletin has no description...

CVE-2007-3392

Wireshark before 0.99.6 allows remote attackers to cause a denial of service via malformed 1 SSL or 2 MMS packets that trigger an infinite loop...

CVE-2007-3392

Wireshark before 0.99.6 allows remote attackers to cause a denial of service via malformed 1 SSL or 2 MMS packets that trigger an infinite loop...

Code injection

Wireshark before 0.99.6 allows remote attackers to cause a denial of service via malformed 1 SSL or 2 MMS packets that trigger an infinite loop...

CVE-2007-3392

Wireshark before 0.99.6 allows remote attackers to cause a denial of service via malformed 1 SSL or 2 MMS packets that trigger an infinite loop...

CVE-2007-3392

Wireshark vulnerability CVE-2007-3392: Wireshark up to version 0.99.6 could enter an infinite loop and cause a denial of service when parsing malformed SSL or MMS packets. Connected documents confirm this CVE is among a set (including 3389–3393) fixed by upgraded Wireshark binaries (e.g., 0.99.6/...

CVE-2007-3392

Wireshark before 0.99.6 allows remote attackers to cause a denial of service via malformed 1 SSL or 2 MMS packets that trigger an infinite loop...

CVE-2007-3392

Wireshark before 0.99.6 allows remote attackers to cause a denial of service via malformed 1 SSL or 2 MMS packets that trigger an infinite loop...

Unfixed XSS vulnerability at www.mms-clan.nl

Security researcher CoNqUeRoR, has submitted on 26/05/2007 a cross-site-scripting XSS vulnerability affecting www.mms-clan.nl, which at the time of submission ranked 0 on the web according to Alexa. We manually validated and published a mirror of this vulnerability on 30/05/2007. It is currently...

MiMMS媒体流处理远程栈溢出漏洞

MiMMS是一款使用MMS协议下载并保存流媒体的程序。 MiMMS在处理畸形的数据时，远程攻击者可能利用此漏洞在用用户机器上执行任意指令。 MiMMS的getheader和getmediapacket函数在从服务器读取数据时存在栈溢出漏洞。如果用户受骗连接到了恶意的服务器的话，就会触发这个漏洞，导致执行任意代码。 xine xine-lib 1.1.0 xine xine-lib 1.0.1 xine xine-lib 1.0 MiMMS MiMMS 0.0.9 厂商补丁： Gentoo ------ Gentoo已经为此发布了一个安全公告（GLSA-200607-07）以及相应补丁:...

Windows CE MMS多媒体短信编辑器远程溢出漏洞

Windows CE是微软开发维护的运行于嵌入式设备的操作系统。 Windows CE自带的MMS多媒体短信编辑器程序实现上存在多个缓冲区溢出漏洞，远程攻击者可能利用此漏洞在用户设备上执行任意指令。 MMS多媒体短信编辑器在处理短信中TransactionID、Subject、ContentLocation等多个头部字段时存在溢出问题，攻击者可能通过向受害者发送畸形MMS消息导致在用户机器上执行任意指令。 Microsoft MMS Composer 2.0.0.13 Microsoft MMS Composer 1.5.5.6...

CVE-2006-4132

ArcSoft MMS Composer 1.5.5.6 and possibly earlier, and 2.0.0.13 and possibly earlier, allow remote attackers to cause a denial of service resource exhaustion and application crash via WAPPush messages to UDP port UDP 2948...

CVE-2006-4131

Multiple buffer overflows in ArcSoft MMS Composer 1.5.5.6, and possibly earlier, and 2.0.0.13, and possibly earlier, allow remote attackers to cause a denial of service crash or execute arbitrary code via crafted MMS Multimedia Messaging Service messages that trigger the overflows in the 1...

CVE-2006-4132

The CVE-2006-4132 entry affects ArcSoft MMS Composer versions 1.5.5.6 and possibly earlier, and 2.0.0.13 and possibly earlier. The vulnerability enables remote impact via WAPPush messages sent to UDP port 2948, causing resource exhaustion and application crash (denial of service). The available s...

CVE-2006-4132

ArcSoft MMS Composer 1.5.5.6 and possibly earlier, and 2.0.0.13 and possibly earlier, allow remote attackers to cause a denial of service resource exhaustion and application crash via WAPPush messages to UDP port UDP 2948...

CVE-2006-4131

Multiple buffer overflows in ArcSoft MMS Composer 1.5.5.6, and possibly earlier, and 2.0.0.13, and possibly earlier, allow remote attackers to cause a denial of service crash or execute arbitrary code via crafted MMS Multimedia Messaging Service messages that trigger the overflows in the 1...

CVE-2006-4131

ArcSoft MMS Composer is affected by multiple buffer overflows in MMS parsers (M-Notification.ind, M-Retrieve.conf, and SMIL parsers) affecting versions 1.5.5.6 and 2.0.0.13 (and possibly earlier). This can allow remote attackers to crash the application or execute arbitrary code via crafted MMS m...