339 matches found
CVE-2016-5356
wiretap/cosine.c in the CoSine file parser in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles sscanf unsigned-integer processing, which allows remote attackers to cause a denial of service application crash via a crafted file...
CVE-2016-5356
Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 contains a vulnerability CVE-2016-5356 in the CoSine file parser (wiretap/cosine.c) where sscanf unsigned-integer processing is mishandled, enabling a remote attacker to cause a denial of service (application crash) via a crafted file.
CVE-2016-5357: Improper Input Validation
wiretap/netscreen.c in the NetScreen file parser in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles sscanf unsigned-integer processing, which allows remote attackers to cause a denial of service application crash via a crafted file...
CVE-2016-5356: Improper Restriction of Operations within the Bounds of a Memory Buffer
wiretap/cosine.c in the CoSine file parser in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles sscanf unsigned-integer processing, which allows remote attackers to cause a denial of service application crash via a crafted file...
CVE-2016-5355: Improper Input Validation
wiretap/toshiba.c in the Toshiba file parser in Wireshark 1.12.x before 1.12.12 and 2.x before 2.0.4 mishandles sscanf unsigned-integer processing, which allows remote attackers to cause a denial of service application crash via a crafted file...
PT-2016-6387
Name of the Vulnerable Software and Affected Versions Wireshark versions 1.12.x through 1.12.11 Wireshark versions 2.x through 2.0.3 Description The issue is related to the NetScreen file parser in Wireshark, where it mishandles sscanf unsigned-integer processing. This allows remote attackers to...
PT-2016-6386
Name of the Vulnerable Software and Affected Versions Wireshark versions 1.12.x through 1.12.11 Wireshark versions 2.x through 2.0.3 Description The issue is related to the CoSine file parser in Wireshark, where the wiretap/cosine.c file mishandles sscanf unsigned-integer processing. This allows...
Wireshark BER Parser Denial of Service Vulnerability
Wireshark is the most popular network protocol parser. In Wireshark versions 2.0.x before 2.0.1 and 1.12.x before 1.12.9, the function dissectberGeneralizedTime within epan/dissectors/packet-ber.c in the BER parser does not correctly check the sscanf return value by constructing a packet, a remot...
CVE-2015-8720
The dissectberGeneralizedTime function in epan/dissectors/packet-ber.c in the BER dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 improperly checks an sscanf return value, which allows remote attackers to cause a denial of service application crash via a crafted packet...
DEBIAN-CVE-2015-8720
The dissectberGeneralizedTime function in epan/dissectors/packet-ber.c in the BER dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 improperly checks an sscanf return value, which allows remote attackers to cause a denial of service application crash via a crafted packet...
UBUNTU-CVE-2015-8720
The dissectberGeneralizedTime function in epan/dissectors/packet-ber.c in the BER dissector in Wireshark 1.12.x before 1.12.9 and 2.0.x before 2.0.1 improperly checks an sscanf return value, which allows remote attackers to cause a denial of service application crash via a crafted packet...
Mozilla: Vulnerabilities found through code inspection (MFSA 2015-112)
The AnimationThread function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 uses an incorrect argument to the sscanf function, which might allow remote attackers to cause a denial of service stack-based buffer overflow and application crash or possibly have unspecified other impa...
CVE-2015-7176
The AnimationThread function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 uses an incorrect argument to the sscanf function, which might allow remote attackers to cause a denial of service stack-based buffer overflow and application crash or possibly have unspecified other impa...
Mozilla: Vulnerabilities found through code inspection (MFSA 2015-112)
The AnimationThread function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 uses an incorrect argument to the sscanf function, which might allow remote attackers to cause a denial of service stack-based buffer overflow and application crash or possibly have unspecified other impa...
UBUNTU-CVE-2015-7176
The AnimationThread function in Mozilla Firefox before 41.0 and Firefox ESR 38.x before 38.3 uses an incorrect argument to the sscanf function, which might allow remote attackers to cause a denial of service stack-based buffer overflow and application crash or possibly have unspecified other impa...
PT-2015-2188
Name of the Vulnerable Software and Affected Versions Firefox versions prior to 41.0 Firefox ESR versions prior to 38.3 Description The issue is related to the AnimationThread function in Firefox and Firefox ESR, which is caused by a buffer overflow due to the incorrect use of the sscanf function...
OracleVM 3.3 : libXfont (OVMSA-2014-0080)
The remote OracleVM system is missing necessary patches to address critical security updates : - CVE-2014-0209: integer overflow of allocations in font metadata file parsing bug 1163602, bug 1163601 - CVE-2014-0210: unvalidated length fields when parsing xfs protocol replies bug 1163602, bug...
openSUSE Security Update : libXfont (openSUSE-SU-2014:0073-1)
UCVE-2013-6462-unlimited-sscanf-overflows-stack-buffe.p atch - unlimited sscanf overflows stack buffer in bdfReadCharacters CVE-2013-6462, bnc854915 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security...
Oracle Linux 5 / 6 : libxfont (ELSA-2014-0018)
The remote Oracle Linux 5 / 6 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2014-0018 advisory. 1.4.5-3 - cve-2013-6462.patch: sscanf overflow bug 1049684 - sscanf-hardening.patch: Some other sscanf hardening fixes 1049684 Tenable has extracted the...
