Nero MediaHome Server Multiple Remote DoS Vulnerabilities

Nero MediaHome Server is prone to multiple denial of service vulnerabilities. SPDX-FileCopyrightText: 2013 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

PT-2013-1757

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 24.0.1312.52 Description A use-after-free issue allows remote attackers to cause a denial of service or possibly have other unspecified impacts via vectors involving PDF fields. Recommendations For versions prio...

PT-2013-1751

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 24.0.1312.52 Description A use-after-free issue allows remote attackers to cause a denial of service or possibly have other unspecified impacts via vectors involving seek operations on video data. Recommendation...

CVE-2012-5977: Improper Restriction of Operations within the Bounds of a Memory Buffer

Asterisk Open Source 1.8.x before 1.8.19.1, 10.x before 10.11.1, and 11.x before 11.1.2; Certified Asterisk 1.8.11 before 1.8.11-cert10; and Asterisk Digiumphones 10.x-digiumphones before 10.11.1-digiumphones, when anonymous calls are enabled, allow remote attackers to cause a denial of service...

Firefly MediaServer Multiple Remote DoS Vulnerabilities

Advisory ID: HTB23129 Product: FireFly Mediaserver Vendor: FireFly Vulnerable Versions: 1.0.0.1359 and probably prior Tested Version: 1.0.0.1359 in Windows 7 SP1 Vendor Notification: November 21, 2012 Public Disclosure: December 19, 2012 Vulnerability Type: NULL Pointer Dereference CWE-476 CVE...

PT-2013-1807

Name of the Vulnerable Software and Affected Versions Tor versions prior to 0.2.3.25 Description The issue allows remote attackers to potentially cause a denial of service or bypass flow-control restrictions. This could lead to memory consumption or an excessive cell reception rate via a RELAY...

PT-2012-1004

Name of the Vulnerable Software and Affected Versions Siemens SIMATIC S7-1200 PLCs versions 2.x through 3.x Description The issue allows remote attackers to cause a denial of service, resulting in a defect-mode transition and control outage, via crafted packets sent to the UDP port 161, also know...

CVE-2012-5991

CVE-2012-5991 affects Cisco Wireless LAN Controller 7.2.110.0. The issue arises from insufficient validation of user-supplied input to the WLC web interface (web_auth_custom.html), enabling remote authenticated users to cause a denial of service (device reload) via a crafted buttonClicked value i...

CVE-2012-5970: Undefined Security Weakness

The Huawei E585 device allows remote attackers to cause a denial of service NULL pointer dereference and device outage via crafted HTTP requests, as demonstrated by unspecified vulnerability-scanning software...

CVE-2012-5143

Integer overflow in Google Chrome before 23.0.1271.97 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to PPAPI image buffers...

TVMOBiLi Media Server Multiple Remote DoS Vulnerabilities

Advisory ID: HTB23120 Product: TVMOBiLi media server Vendor: TVMOBiLi Vulnerable Versions: 2.1.0.3557 and probably prior version Tested Version: 2.1.0.3557 in Windows XP SP3 32 bits Vendor Notification: October 15, 2012 Vendor Patch: November 21, 2012 Public Disclosure: December 5, 2012...

TVMOBiLi Media Server Multiple Remote DoS Vulnerabilities

Advisory ID: HTB23120 Product: TVMOBiLi media server Vendor: TVMOBiLi Vulnerable Versions: 2.1.0.3557 and probably prior version Tested Version: 2.1.0.3557 in Windows XP SP3 32 bits Vendor Notification: October 15, 2012 Vendor Patch: November 21, 2012 Public Disclosure: December 5, 2012...

TVMOBiLi 2.1.0.3557 - Denial of Service

Advisory ID: HTB23120 Product: TVMOBiLi media server Vendor: TVMOBiLi Vulnerable Versions: 2.1.0.3557 and probably prior version Tested Version: 2.1.0.3557 in Windows XP SP3 32 bits Vendor Notification: October 15, 2012 Vendor Patch: November 21, 2012 Public Disclosure: December 5, 2012...

CVE-2012-4690: Undefined Security Weakness

Rockwell Automation Allen-Bradley MicroLogix controller 1100, 1200, 1400, and 1500; SLC 500 controller platform; and PLC-5 controller platform, when Static status is not enabled, allow remote attackers to cause a denial of service via messages that trigger modification of status bits...

CVE-2012-6057: Undefined Security Weakness

The dissecteigrpmetriccomm function in epan/dissectors/packet-eigrp.c in the EIGRP dissector in Wireshark 1.8.x before 1.8.4 uses the wrong data type for a certain offset value, which allows remote attackers to cause a denial of service integer overflow and infinite loop via a malformed packet...

PT-2012-5822

Name of the Vulnerable Software and Affected Versions KYOCERA AH-K3001V KYOCERA AH-K3002V KYOCERA WX300K KYOCERA WX310K KYOCERA WX320K KYOCERA WX320KR Description The issue allows remote attackers to cause a denial of service, resulting in a persistent reboot of the device. This can be achieved b...

PT-2012-5801

Name of the Vulnerable Software and Affected Versions Google Chrome versions prior to 23.0.1271.95 Description A use-after-free issue exists, potentially allowing remote attackers to cause a denial of service or have other unspecified impacts. This issue is related to vectors involving the Media...

CVE-2012-5135

Use-after-free vulnerability in Google Chrome before 23.0.1271.91 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to printing...

PT-2012-6233

Name of the Vulnerable Software and Affected Versions GPSMapEdit version 1.1.73.2 Description The issue allows remote attackers to cause a denial of service, resulting in a crash, by providing a long string in a lst file. Recommendations For GPSMapEdit version 1.1.73.2, consider avoiding the use ...

CVE-2012-0698: Improper Restriction of Operations within the Bounds of a Memory Buffer

tcsd in TrouSerS before 0.3.10 allows remote attackers to cause a denial of service daemon crash via a crafted typeoffset value in a TCP packet to port 30003...