303 matches found
CVE-2012-6062
The dissectrtcpapp function in epan/dissectors/packet-rtcp.c in the RTCP dissector in Wireshark 1.6.x before 1.6.12 and 1.8.x before 1.8.4 allows remote attackers to cause a denial of service infinite loop via a crafted packet...
Code injection
The dissectrtcpapp function in epan/dissectors/packet-rtcp.c in the RTCP dissector in Wireshark 1.6.x before 1.6.12 and 1.8.x before 1.8.4 allows remote attackers to cause a denial of service infinite loop via a crafted packet...
CVE-2012-6062
The dissectrtcpapp function in epan/dissectors/packet-rtcp.c in the RTCP dissector in Wireshark 1.6.x before 1.6.12 and 1.8.x before 1.8.4 allows remote attackers to cause a denial of service infinite loop via a crafted packet...
CVE-2012-6062
The dissectrtcpapp function in epan/dissectors/packet-rtcp.c in the RTCP dissector in Wireshark 1.6.x before 1.6.12 and 1.8.x before 1.8.4 allows remote attackers to cause a denial of service infinite loop via a crafted packet...
CVE-2012-6062
CVE-2012-6062 affects the RTCP dissector in Wireshark 1.6.x (pre-1.6.12) and 1.8.x (pre-1.8.4); a crafted RTCP packet can cause an infinite loop (DoS). Affected products/versions are listed in multiple connected advisories, which also indicate fixed releases. Remediation: upgrade Wireshark to a v...
Wireshark 1.8.x < 1.8.4 Multiple Vulnerabilities
The installed version of Wireshark 1.8 is earlier than 1.8.4. It is, therefore, affected by the following vulnerabilities : - Errors exist related to the USB, sFlow, EIGRP, 3GPP2 A11, SCTP, ICMPv6, iSCSI, WTP and RTCP dissectors that can allow denial of service attacks by putting the application...
Wireshark 1.6.x < 1.6.12 Multiple Vulnerabilities
The installed version of Wireshark 1.6 is earlier than 1.6.12. It is, therefore, affected by the following vulnerabilities : - Errors exist related to the USB, ICMPv6, iSCSI, WTP, and RTCP dissectors that could allow denial of service attacks by putting the application into an infinite loop. Bug...
CVE-2011-0389
Cisco TelePresence Multipoint Switch CTMS devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x allow remote attackers to cause a denial of service process crash via a crafted Real-Time Transport Control Protocol RTCP UDP packet, aka Bug ID CSCth60993...
Code injection
Cisco TelePresence Multipoint Switch CTMS devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x allow remote attackers to cause a denial of service process crash via a crafted Real-Time Transport Control Protocol RTCP UDP packet, aka Bug ID CSCth60993...
AOL AIM sipXtapi.dll多个堆溢出漏洞
BUGTRAQ ID: 36849 AOL Instant Messenger是一款在线即时聊天工具。 AIM的SIP协议实现库(sipXtapi.dll)在解析RTCP发送方报告报文和RTP头时存在堆溢出漏洞。如果攻击者诱骗用户接受了视频聊天会话并向客户端发送了设置有畸形Extension Length值的RTP头或发送了恶意报文的话,就可以触发这些溢出,导致在客户端机器上执行任意指令。 AOL Instant Messenger 6.8 厂商补丁: AOL --- 目前厂商已经发布了升级补丁以修复这个安全问题,请到厂商的主页下载:...
Microsoft Windows RTCP Unspecified Remote DoS Vulnerability
This host is installed with Microsoft Live Messenger and is prone to remote Denial of Service vulnerability. OpenVAS Vulnerability Test $Id: secpodmsrtcpremotedosvuln900404.nasl 5370 2017-02-20 15:24:26Z cfi $ Description: Microsoft Windows RTCP Unspecified Remote DoS Vulnerability Authors: Sujit...
Microsoft Windows RTCP Unspecified Remote DoS Vulnerability
Microsoft Live Messenger is prone to a remote Denial of Service vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...
Code injection
Unspecified vulnerability in Microsoft Office Communications Server OCS, Office Communicator, and Windows Live Messenger allows remote attackers to cause a denial of service crash via a crafted Real-time Transport Control Protocol RTCP receiver report packet...
CVE-2008-5179
The CVE-2008-5179 entry describes an unspecified vulnerability in Microsoft Office Communications Server (OCS), Office Communicator, and Windows Live Messenger that enables remote attackers to trigger a denial-of-service (crash) by sending a crafted RTCP receiver report packet. The vulnerability ...
AOL AIM SIPFoundry sipXtapi RTCP Processing Heap Overflow Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of AOL AIM. Successful exploitation requires the victim to accept a Video Messaging session with the attacker. The specific flaw exists in the SIP protocol implementation library, sipXtapi.dll. If a...
CVE-2007-6093
The SRTP implementation in Ingate Firewall before 4.6.0 and SIParator before 4.6.0 allows remote attackers to cause a denial of service kernel crash via an RTCP index that is "much more than expected."...
Nortel IP Softphone RTCP端口远程溢出漏洞
BUGTRAQ ID: 26118 Nortel IP Softphone是安装在PC客户端上的IP电话解决方案。 IP Softphone 2050在处理畸形报文时存在漏洞,远程攻击者可以利用这个漏洞在客户端工作站上获得用户权限并执行任意指令。 IP Softphone 2050没有正确地处理发送到RTCP端口上的无效报文,如果向该端口发送了无效报文的话,就可能触发缓冲区溢出,导致出现Windows错误消息。 Nortel Networks IP Softphone 2050 厂商补丁: Nortel Networks ---------------...
Buffer overflow
Buffer overflow in the Nortel UNIStim IP Softphone 2050 allows remote attackers to cause a denial of service application abort and possibly execute arbitrary code via a flood of invalid characters to the RTCP port 5678/udp that triggers a Windows error message, aka "extraneous messaging."...
CVE-2007-5636
Buffer overflow in the Nortel UNIStim IP Softphone 2050 allows remote attackers to cause a denial of service application abort and possibly execute arbitrary code via a flood of invalid characters to the RTCP port 5678/udp that triggers a Windows error message, aka "extraneous messaging."...
CVE-2007-5636
Buffer overflow in the Nortel UNIStim IP Softphone 2050 allows remote attackers to cause a denial of service application abort and possibly execute arbitrary code via a flood of invalid characters to the RTCP port 5678/udp that triggers a Windows error message, aka "extraneous messaging."...