UBUNTU-CVE-2012-4288

Integer overflow in the dissectxtpecntl function in epan/dissectors/packet-xtp.c in the XTP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service loop or application crash via a large value for a span length...

CVE-2012-4288

Wireshark vulnerability CVE-2012-4288 affects the XTP dissector (epan/dissectors/packet-xtp.c). An integer overflow allows remote attackers to cause a denial of service (loop or application crash) by sending a large span length. Affected branches: 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8...

CVE-2012-4288

Integer overflow in the dissectxtpecntl function in epan/dissectors/packet-xtp.c in the XTP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service loop or application crash via a large value for a span length...

CVE-2012-4288

Integer overflow in the dissectxtpecntl function in epan/dissectors/packet-xtp.c in the XTP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service loop or application crash via a large value for a span length...

Wireshark -- Multiple vulnerabilities

Wireshark reports: It may be possible to make Wireshark crash by injecting a malformed packet onto the wire or by convincing someone to read a malformed packet trace file. It may be possible to make Wireshark consume excessive CPU resources by injecting a malformed packet onto the wire or by...

Design/Logic Flaw

Caucho Resin Professional 3.1.0 and Caucho Resin 3.1.0 and earlier for Windows allows remote attackers to obtain the system path via certain URLs associated with 1 deploying web applications or 2 displaying .xtp files...