Design/Logic Flaw

The GENESIS32 IcoSetServer ActiveX control in ICONICS GENESIS32 9.21 and BizViz 9.21 configures the trusted zone on the basis of user input, which allows remote attackers to execute arbitrary code via a crafted web site, related to a "Workbench32/WebHMI component SetTrustedZone Policy...

CVE-2011-5088

The GENESIS32 IcoSetServer ActiveX control in ICONICS GENESIS32 9.21 and BizViz 9.21 configures the trusted zone on the basis of user input, which allows remote attackers to execute arbitrary code via a crafted web site, related to a "Workbench32/WebHMI component SetTrustedZone Policy...

Solaris 10 (x86) : 148955-01 (deprecated)

Vulnerability in the Solaris component of Oracle Sun Products Suite subcomponent: Branded Zone. The supported version that is affected is 10. Difficult to exploit vulnerability requiring logon to Operating System. Successful attack of this vulnerability can result in unauthorized write access to...

Cisco IOS Software Zone-Based Firewall Vulnerabilities (cisco-sa-20120328-zbfw)

Cisco IOS Software contains four vulnerabilities related to Cisco IOS Zone-Based Firewall features. These vulnerabilities are as follows: - Memory Leak Associated with Crafted IP Packets - Memory Leak in HTTP Inspection - Memory Leak in H.323 Inspection - Memory Leak in SIP Inspection Workarounds...

CVE-2012-1315

Memory leak in the SIP inspection feature in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service memory consumption or device reload via crafted transit SIP traffic, aka Bug ID CSCti46171...

CVE-2012-0387

Memory leak in the HTTP Inspection Engine feature in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service memory consumption or device reload via crafted transit HTTP traffic, aka Bug ID CSCtq36153...

CVE-2012-0388

Memory leak in the H.323 inspection feature in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service memory consumption or device reload via malformed transit H.323 traffic, aka Bug ID CSCtq45553...

CVE-2012-1310

Memory leak in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service memory consumption or device reload via crafted IP packets, aka Bug ID CSCto89536...

Memory corruption

Memory leak in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service memory consumption or device reload via crafted IP packets, aka Bug ID CSCto89536...

Design/Logic Flaw

Memory leak in the HTTP Inspection Engine feature in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service memory consumption or device reload via crafted transit HTTP traffic, aka Bug ID CSCtq36153...

Design/Logic Flaw

Memory leak in the H.323 inspection feature in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service memory consumption or device reload via malformed transit H.323 traffic, aka Bug ID CSCtq45553...

Information disclosure

Memory leak in the SIP inspection feature in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service memory consumption or device reload via crafted transit SIP traffic, aka Bug ID CSCti46171...

CVE-2012-0387

Memory leak in the HTTP Inspection Engine feature in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service memory consumption or device reload via crafted transit HTTP traffic, aka Bug ID CSCtq36153...

CVE-2012-0388

Memory leak in the H.323 inspection feature in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service memory consumption or device reload via malformed transit H.323 traffic, aka Bug ID CSCtq45553...

CVE-2012-1310

Cisco IOS Zone-Based Firewall vulnerabilities (CVE-2012-1310) affect the Zone-Based Firewall in IOS 12.4 and 15.x releases (notably 15.0/15.1/15.2). The issues are memory leaks triggered by crafted IP packets and, per the related advisories, also affect memory behavior in HTTP, H.323, and SIP ins...

CVE-2012-0387

CVE-2012-0387 concerns a memory leak in the Cisco IOS Zone-Based Firewall HTTP Inspection Engine. The flaw affects Cisco IOS versions 12.4 and 15.0/15.1/15.2, where crafted transit HTTP traffic can trigger a memory leak, leading to denial of service via memory consumption or device reload. The is...

CVE-2012-1315

Memory leak in the SIP inspection feature in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service memory consumption or device reload via crafted transit SIP traffic, aka Bug ID CSCti46171...

CVE-2012-1315

CVE-2012-1315 covers a memory leak in the Cisco IOS Zone-Based Firewall SIP inspection feature. Reported impact: a remote attacker can cause denial of service via crafted transit SIP traffic, potentially leading to memory exhaustion or device reload. Affected software ranges include Cisco IOS 12....

CVE-2012-1310

Memory leak in the Zone-Based Firewall in Cisco IOS 12.4, 15.0, 15.1, and 15.2 allows remote attackers to cause a denial of service memory consumption or device reload via crafted IP packets, aka Bug ID CSCto89536...

CVE-2012-0388

CVE-2012-0388 relates to a memory leak in the H.323 inspection feature of Cisco IOS’s Zone-Based Firewall . Affected: Cisco IOS versions 12.4, 15.0, 15.1, 15.2. Cause: memory leak triggered by malformed transit H.323 traffic, enabling remote attackers to cause a denial of service through memory c...