[SECURITY] Fedora 19 Update: libzrtpcpp-2.3.4-1.fc19

This package provides a library that adds ZRTP support to the GNU ccRTP stack. Phil Zimmermann developed ZRTP to allow ad-hoc, easy to use key negotiation to setup Secure RTP SRTP sessions. GNU ZRTP together with GNU ccRTP 1.5.0 or later provides a ZRTP implementation that can be directly embedde...

CVE-2013-3393

The Precision Video Engine component in Cisco Jabber for Windows and Cisco Virtualization Experience Media Engine allows remote attackers to cause a denial of service process crash and call disconnection via crafted RTP packets, aka Bug IDs CSCuh60706 and CSCue21117...

Design/Logic Flaw

The Precision Video Engine component in Cisco Jabber for Windows and Cisco Virtualization Experience Media Engine allows remote attackers to cause a denial of service process crash and call disconnection via crafted RTP packets, aka Bug IDs CSCuh60706 and CSCue21117...

CVE-2013-3393

The CVE-2013-3393 issue affects Cisco’s Precision Video Engine used by Cisco Jabber for Windows and Cisco Virtualization Experience Media Engine. The root cause is improper handling of crafted RTP packets, which can be sent remotely to trigger a denial of service, causing process crashes and disc...

CVE-2013-3393

The Precision Video Engine component in Cisco Jabber for Windows and Cisco Virtualization Experience Media Engine allows remote attackers to cause a denial of service process crash and call disconnection via crafted RTP packets, aka Bug IDs CSCuh60706 and CSCue21117...

Cisco Jabber Video Engine Denial of Service Vulnerability

A vulnerability in Cisco's Precision Video Engine CVPE code could allow an unauthenticated, remote attacker to cause the crash of various processes and the disconnection of any active calls. The vulnerability is due to improper handling of crafted Real-Time Protocol RTP packets sent at a high rat...

Cisco TelePresence DoS

DoS via malformed RTP packets...

CVE-2013-1176

The DSP card on Cisco TelePresence MCU 4500 and 4501 devices before 4.32.30, TelePresence MCU MSE 8510 devices before 4.32.30, and TelePresence Server before 2.31.55 does not properly validate H.264 data, which allows remote attackers to cause a denial of service device reload via crafted RTP...

Design/Logic Flaw

The DSP card on Cisco TelePresence MCU 4500 and 4501 devices before 4.32.30, TelePresence MCU MSE 8510 devices before 4.32.30, and TelePresence Server before 2.31.55 does not properly validate H.264 data, which allows remote attackers to cause a denial of service device reload via crafted RTP...

Fedora 18 : ekiga-4.0.1-1.fc18 / opal-3.10.10-1.fc18 / ptlib-2.10.10-1.fc18 (2013-2998)

New upstream ekiga 4.0.1 release - Core fixes - Fix crash when quitting ekiga while receiving presence information - Fix crash when quitting ekiga right after starting it before STUN ending - Fix crash when disabling an account while icons in roster are changing - Fix crash when receiving call a...

GLSA-201209-15 : Asterisk: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-201209-15 Asterisk: Multiple vulnerabilities Multiple vulnerabilities have been found in Asterisk: An error in manager.c allows shell access CVE-2012-2186. An error in Asterisk could cause all RTP ports to be exhausted...

Asterisk: Multiple vulnerabilities

Background Asterisk is an open source telephony engine and toolkit. Description Multiple vulnerabilities have been found in Asterisk: An error in manager.c allows shell access CVE-2012-2186. An error in Asterisk could cause all RTP ports to be exhausted CVE-2012-3812. A double-free error could...

Fedora 17 : asterisk-10.5.2-1.fc17 (2012-10324)

The Asterisk Development Team has announced security releases for Certified Asterisk 1.8.11 and Asterisk 1.8 and 10. The available security releases are released as versions 1.8.11-cert4, 1.8.13.1, 10.5.2, and 10.5.2-digiumphones. These releases are available for immediate download at...

Asterisk Endpoint Provisional Response Parsing RTP Port Consumption Remote DoS (AST-2012-010)

According to the version in its SIP banner, the version of Asterisk running on the remote host is potentially affected by a vulnerability that could allow a remote, authenticated attacker to exhaust the server of resources. If an endpoint sends a provisional response to the server's re-INVITE...

Cross site request forgery (csrf)

channels/chansip.c in Asterisk Open Source 1.8.x before 1.8.13.1 and 10.x before 10.5.2, Asterisk Business Edition C.3.x before C.3.7.5, Certified Asterisk 1.8.11-certx before 1.8.11-cert4, and Asterisk Digiumphones 10.x.x-digiumphones before 10.5.2-digiumphones does not properly handle a...

CVE-2012-3863

channels/chansip.c in Asterisk Open Source 1.8.x before 1.8.13.1 and 10.x before 10.5.2, Asterisk Business Edition C.3.x before C.3.7.5, Certified Asterisk 1.8.11-certx before 1.8.11-cert4, and Asterisk Digiumphones 10.x.x-digiumphones before 10.5.2-digiumphones does not properly handle a...

CVE-2012-3863

CVE-2012-3863 affects Asterisk Open Source 1.8.x before 1.8.13.1 and 10.x before 10.5.2 (also in various packaged releases such as Certified Asterisk and Digiumphones) due to improper handling of a provisional SIP reINVITE response in channels/chan_sip.c. This can allow remote authenticated users...

CVE-2012-3863

channels/chansip.c in Asterisk Open Source 1.8.x before 1.8.13.1 and 10.x before 10.5.2, Asterisk Business Edition C.3.x before C.3.7.5, Certified Asterisk 1.8.11-certx before 1.8.11-cert4, and Asterisk Digiumphones 10.x.x-digiumphones before 10.5.2-digiumphones does not properly handle a...

Zinf Audio Player (m3u file) Buffer Overflow (SEH)

Exploit for windows platform in category local exploits !/usr/bin/python Product Details: --------------------------------------------------------------------------------- The Zinf audio player is a simple, but powerful audio player for Linux and Win32. It supports MP3, Ogg/Vorbis, WAV and Audio ...

DEBIAN-CVE-2012-0885

chansip.c in Asterisk Open Source 1.8.x before 1.8.8.2 and 10.x before 10.0.1, when the ressrtp module is used and media support is improperly configured, allows remote attackers to cause a denial of service NULL pointer dereference and daemon crash via a crafted SDP message with a crypto attribu...