1330 matches found
CVE-2008-0225
CVE-2008-0225 is a vulnerability in xine-lib up to version 1.1.9 where a heap-based buffer overflow in rmff_dump_cont (rmff.c) can be triggered via the SDP Abstract attribute in an RTSP session. The root cause is the code path that disregards the max field in rmff_dump_header, leading to potentia...
CVE-2008-0225: Improper Restriction of Operations within the Bounds of a Memory Buffer
Heap-based buffer overflow in the rmffdumpcont function in input/libreal/rmff.c in xine-lib 1.1.9 and earlier allows remote attackers to execute arbitrary code via the SDP Abstract attribute in an RTSP session, related to the rmffdumpheader function and related to disregarding the max field. NOTE...
Xine-Lib 1.1.9 - rmff_dump_cont() Remote Heap Buffer Overflow (PoC)
Xine-Lib 1.1.9 - rmffdumpcont Remote Heap Buffer Overflow PoC source: https://www.securityfocus.com/bid/27198/info The xine-lib library is prone to a remote heap-based buffer-overflow vulnerability. This issue occurs because the software fails to perform adequate boundary checks on user-supplied...
Debian DSA-1414-1 : wireshark - several vulnerabilities
Several remote vulnerabilities have been discovered in the Wireshark network traffic analyzer, which may lead to denial of service or execution of arbitrary code. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2007-6114 Stefan Esser discovered a buffer...
WireShark sniffer multiple security vulnerabilities
Buffer overflow on SSL parsing, DoS on HTTP, MEGACO, Bluetooth SDP, RPC parsing...
[SECURITY] [DSA 1414-1] New wireshark packages fix several vulnerabilities
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------ Debian Security Advisory DSA-1414-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 27, 2007 http://www.debian.org/security/faq -...
[SECURITY] [DSA 1414-1] New wireshark packages fix several vulnerabilities
------------------------------------------------------------------------ Debian Security Advisory DSA-1414-1 [email protected] http://www.debian.org/security/ Moritz Muehlenhoff November 27, 2007 http://www.debian.org/security/faq -...
DSA-1414-1 wireshark - several vulnerabilities
Bulletin has no description...
Wireshark 0.99.6版本多个远程拒绝服务漏洞
BUGTRAQ ID: 26532 Wireshark以前名为Ethereal，是一款非常流行的网络协议分析工具。 Wireshark的以下协议处理模块中存在多个死循环、内存耗尽、崩溃或缓冲器溢出漏洞： SSL、ANSI MAP、Firebird/Interbase、NCP、HTTP、MEGACO、DCP ETSI、PPP和蓝牙SDP处理模块 处理畸形的MP3或iSeries（OS/400）通讯追踪文件 处理畸形的DNP或RPC端口映射报文 如果Wireshark受骗从网络抓包或通过抓包文件解析了上述畸形报文的话，就会耗尽大量系统资源。 Wireshark Wireshark 0.8.1...
CVE-2007-6120
The Bluetooth SDP dissector Wireshark formerly Ethereal 0.99.2 to 0.99.6 allows remote attackers to cause a denial of service infinite loop via unknown vectors...
CVE-2007-6120
The Bluetooth SDP dissector Wireshark formerly Ethereal 0.99.2 to 0.99.6 allows remote attackers to cause a denial of service infinite loop via unknown vectors...
CVE-2007-6120
CVE-2007-6120 affects Wireshark (formerly Ethereal) Bluetooth SDP dissector, enabling remote denial of service via infinite loop in versions 0.99.2–0.99.6. Connected advisories confirm the vulnerability in the Bluetooth SDP parser and related DoS concerns; upgrade to Wireshark 0.99.7 (or later) t...
CVE-2007-6120
The Bluetooth SDP dissector Wireshark formerly Ethereal 0.99.2 to 0.99.6 allows remote attackers to cause a denial of service infinite loop via unknown vectors...
CVE-2007-6120
The Bluetooth SDP dissector Wireshark formerly Ethereal 0.99.2 to 0.99.6 allows remote attackers to cause a denial of service infinite loop via unknown vectors...
CVE-2007-6120: Improper Restriction of Operations within the Bounds of a Memory Buffer
The Bluetooth SDP dissector Wireshark formerly Ethereal 0.99.2 to 0.99.6 allows remote attackers to cause a denial of service infinite loop via unknown vectors...
CVE-2007-3753
Apple iPhone 1.1.1, with Bluetooth enabled, allows physically proximate attackers to cause a denial of service application termination and execute arbitrary code via crafted Service Discovery Protocol SDP packets, related to insufficient input validation...
CVE-2007-3753: Improper Input Validation
Apple iPhone 1.1.1, with Bluetooth enabled, allows physically proximate attackers to cause a denial of service application termination and execute arbitrary code via crafted Service Discovery Protocol SDP packets, related to insufficient input validation...
Multiple Remote unauthenticated stack overflows in Asterisk chan_sip.c
======= Summary ======= Name: Multiple Remote unauthenticated stack overflows in Asterisk chansip.c Release Date: 4 July 2007 Reference: NGS00497 Discover: Barrie Dempster [email protected] Vendor: Digium Vendor Reference: ASA-010 Systems Affected: Asterisk 1.4.3; AsteriskNOW Beta6; Asterisk...
CVE-2007-3441: Undefined Security Weakness
Format string vulnerability in the Aastra 9112i SIP Phone with firmware 1.4.0.1048 and boot version 1.1.0.10 allows remote attackers to cause a denial of service blocked call reception and slow calling via format string specifiers in an SDP header value, a different vulnerability than CVE-2007-33...
