CVE-2015-1681: Improper Restriction of Operations within the Bounds of a Memory Buffer

Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8, Windows 8.1, Windows Server 2012 Gold and R2, and Windows RT Gold and 8.1 allow local users to cause a denial of service via a crafted .msc file, aka "Microsoft Management Console File Format Denial of...

MS15-054: Vulnerability in Microsoft Management Console file format could allow denial of service: May 12, 2015

None None...

PT-2015-5423

Name of the Vulnerable Software and Affected Versions Microsoft Windows versions prior to the fixed version Description A denial of service issue exists when the system attempts to access a specially crafted .msc file to retrieve icon information and fails to properly validate a destination buffe...

Microsoft Management Console File Format Denial of Service (MS15-054; CVE-2015-1681)

A denial of service vulnerability has been reported in Microsoft Management Console. The vulnerability exists when Windows attempts to access a specially crafted .msc file to retrieve the icon information, and then fails to properly validate a destination buffer. A remote attacker can exploit thi...

Important: Red Hat Security Advisory: Red Hat JBoss BPM Suite 6.0.3 update

Red Hat JBoss BPM Suite 6.0.3, which fixes multiple security issues, several bugs, and adds various enhancements, is now available from the Red Hat Customer Portal. Red Hat Product Security has rated this update as having Important security impact. Common Vulnerability Scoring System CVSS base...

CVE-2014-0018

Red Hat JBoss Enterprise Application Platform JBEAP 6.2.0 and JBoss WildFly Application Server, when run under a security manager, do not properly restrict access to the Modular Service Container MSC service registry, which allows local users to modify the server via a crafted deployment...

Design/Logic Flaw

Red Hat JBoss Enterprise Application Platform JBEAP 6.2.0 and JBoss WildFly Application Server, when run under a security manager, do not properly restrict access to the Modular Service Container MSC service registry, which allows local users to modify the server via a crafted deployment...

CVE-2014-0018

Red Hat JBoss Enterprise Application Platform JBEAP 6.2.0 and JBoss WildFly Application Server, when run under a security manager, do not properly restrict access to the Modular Service Container MSC service registry, which allows local users to modify the server via a crafted deployment...

Moderate: Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 6.2.1 update

Updated packages that provide Red Hat JBoss Enterprise Application Platform 6.2.1 and fix three security issues, several bugs, and add various enhancements are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having Moderate security impact...

CVE-2008-5871

Nortel Multimedia Communication Server MSC 5100 3.0.13 does not verify credentials during call placement, which allows remote attackers to spoof and redirect VoIP calls, possibly related to the snoop command...

Command injection

Nortel Multimedia Communication Server MSC 5100 3.0.13 does not verify credentials during call placement, which allows remote attackers to spoof and redirect VoIP calls, possibly related to the snoop command...

Code injection

Multiple unspecified vulnerabilities in the UNIStim File Transfer Protocol UFTP processing in IP Client Manager IPCM in Nortel Multimedia Communication Server MSC 5100 3.0.13 allow remote attackers to cause a denial of service device outage via a UFTP message that has a negative block size or oth...

CVE-2008-5871

CVE-2008-5871 affects Nortel Multimedia Communication Server (MSC) 5100, version 3.0.13. The underlying issue is that the system does not verify credentials during call placement, enabling remote attackers to spoof and redirect VoIP calls. The impact is partial confidentiality/integrity/availabil...

CVE-2008-5872

Affected product: Nortel Mult imedia Communication Server (MSC) 5100, IPCM component, specifically the UNIStim File Transfer Protocol (UFTP) processing. Vulnerability details: Multiple unspecified issues in UFTP handling allow remote attackers to trigger a denial of service (device outage) by sen...

CVE-2008-5871

Nortel Multimedia Communication Server MSC 5100 3.0.13 does not verify credentials during call placement, which allows remote attackers to spoof and redirect VoIP calls, possibly related to the snoop command...

CVE-2008-5872: Improper Input Validation

Multiple unspecified vulnerabilities in the UNIStim File Transfer Protocol UFTP processing in IP Client Manager IPCM in Nortel Multimedia Communication Server MSC 5100 3.0.13 allow remote attackers to cause a denial of service device outage via a UFTP message that has a negative block size or oth...

CVE-2008-5871: Undefined Security Weakness

Nortel Multimedia Communication Server MSC 5100 3.0.13 does not verify credentials during call placement, which allows remote attackers to spoof and redirect VoIP calls, possibly related to the snoop command...

Code injection

Cisco IOS XR, when configured for Multi Protocol Label Switching MPLS and running on Cisco CRS-1 routers, allows remote attackers to cause a denial of service Modular Services Cards MSC crash or "MPLS packet handling problems" via certain MPLS packets, as identified by Cisco bug IDs 1 CSCsd15970...