CVE-2008-1440

Microsoft Windows XP SP2 and SP3, and Server 2003 SP1 and SP2, does not properly validate the option length field in Pragmatic General Multicast PGM packets, which allows remote attackers to cause a denial of service infinite loop and system hang via a crafted PGM packet, aka the "PGM Invalid...

CVE-2008-1440

CVE-2008-1440 is a Windows DoS vulnerability in Pragmatic General Multicast (PGM) caused by improper validation of the PGM option length field. A remote attacker can trigger an infinite loop by sending a crafted PGM packet, rendering affected systems non-responsive and requiring a restart. Affect...

CVE-2008-1441

Microsoft Windows XP SP2 and SP3, Server 2003 SP1 and SP2, Vista Gold and SP1, and Server 2008 allows remote attackers to cause a denial of service system hang via a series of Pragmatic General Multicast PGM packets with invalid fragment options, aka the "PGM Malformed Fragment Vulnerability."...

CVE-2008-1441

CVE-2008-1441 describes a denial-of-service vulnerability in Pragmatic General Multicast (PGM) in Windows XP (SP2/SP3), Windows Server 2003 (SP1/SP2), Windows Vista (Gold/SP1), and Windows Server 2008. The flaw is due to improper validation in the PGM parser when handling malformed PGM fragments,...

PT-2008-3012 · Microsoft · Windows Xp +1

Name of the Vulnerable Software and Affected Versions: Microsoft Windows XP versions SP2 through SP3 Microsoft Windows Server 2003 versions SP1 through SP2 Description: The issue arises from improper validation of the option length field in Pragmatic General Multicast PGM packets, allowing remote...

Microsoft Windows PGM Packet Handling Denial of Service (MS08-036; CVE-2008-1440)

PGM is a reliable and scalable multicast protocol that enables receivers to detect loss, request retransmission of lost data, or notify an application of unrecoverable loss. The vulnerability is due to the PGM's parsing code that fails to properly validate the option field length of a PGM packet....

Microsoft Windows PGM Invalid Fragment Remote Denial Of Service Vulnerability

Description Microsoft Windows is prone to a remote denial-of-service vulnerability because it fails to adequately handle specially crafted PGM Pragmatic General Multicast network traffic. Attackers can exploit this issue to cause affected computers to stop responding until all the malformed packe...

Microsoft Windows PGM Invalid Length Remote Denial Of Service Vulnerability

Description Microsoft Windows is prone to a remote denial-of-service vulnerability because it fails to adequately handle specially crafted PGM Pragmatic General Multicast network traffic. Attackers can exploit this issue to cause an affected computer to stop responding until it is manually...

openSUSE 10 Security Update : ImageMagick (ImageMagick-2235)

Two security problems were found in GraphicsMagick which are also present in ImageMagick. CVE-2006-5456: Multiple buffer overflows in ImageMagick allowed user-assisted attackers to cause a denial of service and possibly execute arbitrary code via 1 a DCM image that is not properly handled by the...

Code injection

Cisco IOS 9.x, 10.x, 11.x, and 12.x and IOS XR 2.0.x, 3.0.x, and 3.2.x allows remote attackers to cause a denial of service or execute arbitrary code via a crafted IP option in the IP header in a 1 ICMP, 2 PIMv2, 3 PGM, or 4 URD packet...

CVE-2007-0480

Cisco IOS 9.x, 10.x, 11.x, and 12.x and IOS XR 2.0.x, 3.0.x, and 3.2.x allows remote attackers to cause a denial of service or execute arbitrary code via a crafted IP option in the IP header in a 1 ICMP, 2 PIMv2, 3 PGM, or 4 URD packet...

Cisco IOS畸形IP选项远程拒绝服务及代码执行漏洞

Cisco IOS是Cisco设备所使用的操作系统。 Cisco IOS在处理特定畸形的IP报文时存在漏洞，远程攻击者可能利用此漏洞导致设备无法正常工作或在设备上执行任意指令。 如果满足了所有以下3个条件的话： 1. 报文包含有特制的IP选择 2. 报文为以下协议之一： ICMP - Echo Type 8 - 'ping' ICMP - Timestamp Type 13 ICMP - Information Request Type 15 ICMP - Address Mask Request Type 17 PIMv2 - IP protocol 103 PGM - IP...

CVE-2007-0480

The CVE-2007-0480 vulnerability affects Cisco IOS 9.x, 10.x, 11.x, 12.x and IOS XR 2.0.x, 3.0.x, 3.2.x. A crafted IP option in the IP header contained in ICMP, PIMv2, PGM, or URD packets can cause a remote denial of service and may allow arbitrary code execution. Exploitation is remote and may re...

Cisco IOS fails to properly process certain packets containing a crafted IP option

Overview Cisco IOS software contains a vulnerablity that may allow an attacker to execute arbitrary code or create a denial of service condition. Description Cisco IOS is an operating system that is used on Cisco network devices. The Internet Control Message Protocol ICMP is a protocol commonly...

Microsoft PGM远程缓冲区溢出漏洞（MS06-052）

PGM是一个可靠且可伸缩的多播协议，允许接收方检测丢失、请求重新传输丢失的数据或者通知应用程序无法恢复的丢失情形。 Microsoft在处理PGM消息时存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞在服务器上执行任意指令。 如果攻击者发送了特制的多播消息的话，就可能触发这个漏洞，导致执行任意指令。但成功攻击要求系统安装了MSMQ（Microsoft消息队列）服务，而该服务不是默认安装的。 Microsoft Windows XP SP2 Microsoft Windows XP SP1 厂商补丁： Microsoft ---------...

CVE-2006-3442

Unspecified vulnerability in Pragmatic General Multicast PGM in Microsoft Windows XP SP2 and earlier allows remote attackers to execute arbitrary code via a crafted multicast message...

CVE-2006-3442

This CVE affects Microsoft Windows XP (XP SP1/SP2) with the MSMQ/ Pragmatic General Multicast (PGM) implementation. The root cause is an invalid memory access/buffer overflow in PGM within MSMQ, enabling a remote attacker to execute code on a vulnerable system by sending a specially crafted multi...

Microsoft Windows XP Pragmatic General Multicast memory corruption

Memory corruption on parsing multicast PGM message if Microsoft Message Queuing Services MSMQ service is installed...

Microsoft PGM vulnerable to remote code execution

Overview A buffer overflow vulnerability in Microsoft's Pragmatic General Multicast PGM protocol implementation may allow an attacker to execute arbitrary code. Description The Pragmatic General Multicast PGM protocol is an experimental protocol defined in RFC 3208. Microsoft's implementation of...

Microsoft Security Bulletin MS06-052 Vulnerability in Pragmatic General Multicast (PGM) Could Allow Remote Code Execution (919007)

Microsoft Security Bulletin MS06-052 Vulnerability in Pragmatic General Multicast PGM Could Allow Remote Code Execution 919007 Published: September 12, 2006 Version: 1.0 Summary Who Should Read this Document: Customers who use Microsoft Windows Impact of Vulnerability: Remote Code Execution Maxim...