Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2012-4273 State: PUBLISHED Published: 2012-08-13T22:00:00 Last Updated: 2024-08-06T20:28:07.800Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in libs/xing.php in the 2 Click Social Media Buttons plugin before 0.34 for WordPress allows remote attackers to inject arbitrary web script or HTML via the xing-url parameter. Additional Analyst Notes: - CVE Program Container: References: - http://plugins.trac.wordpress.org/changeset?old_path=%2F2-click-socialmedia-buttons&old=532798&new_path=%2F2-click-socialmedia-buttons&new=532798 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75518 - http://packetstormsecurity.org/files/112
ttons&new=532798 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75518 - http://packetstormsecurity.org/files/112615/WordPress-2-Click-Socialmedia-Buttons-Cross-Site-Scripting.html - http://wordpress.org/extend/plugins/2-click-socialmedia-buttons/changelog/
CVE ID: CVE-2012-4274 State: PUBLISHED Published: 2012-08-13T22:00:00Z Last Updated: 2024-09-16T22:01:53.469Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Hitachi Cobol GUI Option 06-00, 06-01 through 06-01-/A, 07-00, 07-01 before 07-01-/B, and 08-00 before 08-00-/B and Cobol GUI Option Server 07-00, 07-01 before 07-01-/B, and 08-00 before 08-00-/B allows remote attackers to execute arbitrary code via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49158 - http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS12-013/index.html
CVE ID: CVE-2012-4275 State: PUBLISHED Published: 2012-08-13T22:00:00Z Last Updated: 2024-09-17T04:03:56.147Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in Hitachi IT Operations Director 02-50-01 through 02-50-07, 03-00 before 03-00-08 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49144 - http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS12-014/index.html
CVE ID: CVE-2012-4276 State: PUBLISHED Published: 2012-08-13T22:00:00Z Last Updated: 2024-09-16T18:54:27.254Z Vendors: n/a Products: n/a Problem Types: n/a Description: Unspecified vulnerability in Hitachi IT Operations Director 02-50-01 through 02-50-07, 03-00 before 03-00-08 allows attackers to cause a denial of service via unknown attack vectors. Additional Analyst Notes: - CVE Program Container: References: - http://secunia.com/advisories/49144 - http://www.hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS12-014/index.html
CVE ID: CVE-2012-4277 State: PUBLISHED Published: 2012-08-13T22:00:00Z Last Updated: 2024-09-17T01:51:08.501Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the smarty_function_html_options_optoutput function in distribution/libs/plugins/function.html_options.php in Smarty before 3.1.8 allows remote attackers to inject arbitrary web script or HTML via unspecified vectors. Additional Analyst Notes: - CVE Program Container: References: - http://www.securitytracker.com/id?1027061 - http://code.google.com/p/smarty-php/issues/detail?id=98&can=1 - http://secunia.com/advisories/49164 - http://smarty-php.googlecode.com/svn/trunk/distribution/ch
es/detail?id=98&can=1 - http://secunia.com/advisories/49164 - http://smarty-php.googlecode.com/svn/trunk/distribution/change_log.txt - http://code.google.com/p/smarty-php/source/detail?r=4612
CVE ID: CVE-2012-4278 State: PUBLISHED Published: 2012-08-13T22:00:00Z Last Updated: 2024-09-17T02:01:04.358Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site scripting (XSS) vulnerabilities in Free Realty 3.1-0.6 allow remote attackers to inject arbitrary web script or HTML via the (1) notes parameter to (a) admin/agenteditor.php; (2) title, (3) previewdesc, (4) fulldesc, or (5) notes parameter (b) to agentadmin.php or (c) in an addlisting action to agentadmin.php; or unspecified vectors to (d) admin/adminfeatures.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18874 - http://www.securityfocus.com/bid/534
: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18874 - http://www.securityfocus.com/bid/53491 - http://www.vulnerability-lab.com/get_content.php?id=513 - http://secunia.com/advisories/49132
CVE ID: CVE-2012-4279 State: PUBLISHED Published: 2012-08-13T22:00:00Z Last Updated: 2024-09-17T00:30:45.272Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Free Realty 3.1-0.6 allow remote attackers to execute arbitrary SQL commands via the (1) view parameter to agentdisplay.php or (2) edit parameter to admin/admin.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18874 - http://www.securityfocus.com/bid/53491 - http://www.vulnerability-lab.com/get_content.php?id=513 - http://secunia.com/advisories/49132
CVE ID: CVE-2012-4280 State: PUBLISHED Published: 2012-08-13T22:00:00Z Last Updated: 2024-09-17T04:03:55.076Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple cross-site request forgery (CSRF) vulnerabilities in admin/agenteditor.php in Free Realty 3.1-0.6 allow remote attackers to hijack the authentication of administrators for requests that (1) add an agent via an addagent action or (2) modify an agent. Additional Analyst Notes: - CVE Program Container: References: - http://www.exploit-db.com/exploits/18874 - http://www.securityfocus.com/bid/53491 - http://www.vulnerability-lab.com/get_content.php?id=513 - http://secunia.com/advisories/49132
CVE ID: CVE-2012-4281 State: PUBLISHED Published: 2012-08-13T22:00:00 Last Updated: 2024-08-06T20:35:08.218Z Vendors: n/a Products: n/a Problem Types: n/a Description: Multiple SQL injection vulnerabilities in Travelon Express 6.2.2 allow remote attackers to execute arbitrary SQL commands via the hid parameter to (1) holiday.php or (2) holiday_book.php, (3) id parameter to pages.php, (4) fid parameter to admin/airline-edit.php, or (5) cid parameter to admin/customer-edit.php. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/53500 - http://www.osvdb.org/81886 - http://secunia.com/advisories/49118 - http://www.osvdb.org/81884 - https://exchange.
3500 - http://www.osvdb.org/81886 - http://secunia.com/advisories/49118 - http://www.osvdb.org/81884 - https://exchange.xforce.ibmcloud.com/vulnerabilities/75540 - http://www.osvdb.org/81885 - http://www.osvdb.org/81883 - http://www.vulnerability-lab.com/get_content.php?id=530 - http://www.exploit-db.com/exploits/18871 - http://www.osvdb.org/81882
CVE ID: CVE-2012-4282 State: PUBLISHED Published: 2012-08-13T23:00:00 Last Updated: 2024-08-06T20:35:08.737Z Vendors: n/a Products: n/a Problem Types: n/a Description: SQL injection vulnerability in photo.php in Trombinoscope 3.5 allows remote attackers to execute arbitrary SQL commands via the id parameter. Additional Analyst Notes: - CVE Program Container: References: - https://exchange.xforce.ibmcloud.com/vulnerabilities/75427 - http://www.securityfocus.com/bid/53398 - http://packetstormsecurity.org/files/112488/Trombinoscope-3.5-SQL-Injection.html
CVE ID: CVE-2012-4283 State: PUBLISHED Published: 2012-08-13T23:00:00Z Last Updated: 2024-09-16T16:33:10.686Z Vendors: n/a Products: n/a Problem Types: n/a Description: Cross-site scripting (XSS) vulnerability in the Login With Ajax plugin before 3.0.4.1 for WordPress allows remote attackers to inject arbitrary web script or HTML via the callback parameter. Additional Analyst Notes: - CVE Program Container: References: - http://plugins.trac.wordpress.org/changeset/541069 - http://wordpress.org/extend/plugins/login-with-ajax/changelog/ - http://secunia.com/advisories/49013
CVE ID: CVE-2012-4284 State: PUBLISHED Published: 2020-01-10T19:09:55 Last Updated: 2024-08-06T20:35:08.222Z Vendors: n/a Products: n/a Problem Types: n/a Description: A Privilege Escalation vulnerability exists in Viscosity 1.4.1 on Mac OS X due to a path name validation issue in the setuid-set ViscosityHelper binary, which could let a remote malicious user execute arbitrary code Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/55002 - http://www.exploit-db.com/exploits/24579 - https://packetstormsecurity.com/files/120643/Viscosity-setuid-set-ViscosityHelper-Privilege-Escalation.html - https://www.sparklabs.com/viscosity/releasenotes/mac/
CVE ID: CVE-2012-4285 State: PUBLISHED Published: 2012-08-16T10:00:00 Last Updated: 2024-08-06T20:35:08.146Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dissect_pft function in epan/dissectors/packet-dcp-etsi.c in the DCP ETSI dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a zero-length message. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/55035 - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-dcp-etsi.c?r1=44247&r2=44246&pathrev=44247 - https://bugs.wireshark.or
wireshark.org/viewvc/trunk/epan/dissectors/packet-dcp-etsi.c?r1=44247&r2=44246&pathrev=44247 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7566 - http://anonsvn.wireshark.org/viewvc?view=revision&revision=44247 - http://secunia.com/advisories/54425 - http://rhn.redhat.com/errata/RHSA-2013-0125.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15712 - https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_wireshark3 - http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml - http://secunia.com/advisories/51363 - http://lists.opensuse.org/opensuse-updates/2012-08/msg00033.html - http://www.wireshark.org/security/wnpa-sec-201
1363 - http://lists.opensuse.org/opensuse-updates/2012-08/msg00033.html - http://www.wireshark.org/security/wnpa-sec-2012-13.html - http://secunia.com/advisories/50276 - https://hermes.opensuse.org/messages/15514562
CVE ID: CVE-2012-4286 State: PUBLISHED Published: 2012-08-16T10:00:00 Last Updated: 2024-08-06T20:35:08.241Z Vendors: n/a Products: n/a Problem Types: n/a Description: The pcapng_read_packet_block function in wiretap/pcapng.c in the pcap-ng file parser in Wireshark 1.8.x before 1.8.2 allows user-assisted remote attackers to cause a denial of service (divide-by-zero error and application crash) via a crafted pcap-ng file. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/55035 - http://www.wireshark.org/security/wnpa-sec-2012-24.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15693 - http://secunia.c
4.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15693 - http://secunia.com/advisories/54425 - http://anonsvn.wireshark.org/viewvc?revision=44074&view=revision - https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_wireshark3 - http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7533 - http://secunia.com/advisories/51363 - http://anonsvn.wireshark.org/viewvc/trunk/wiretap/pcapng.c?r1=44074&r2=44073&pathrev=44074 - http://secunia.com/advisories/50276 - https://hermes.opensuse.org/messages/15514562
CVE ID: CVE-2012-4287 State: PUBLISHED Published: 2012-08-16T10:00:00 Last Updated: 2024-08-06T20:35:08.216Z Vendors: n/a Products: n/a Problem Types: n/a Description: epan/dissectors/packet-mongo.c in the MongoDB dissector in Wireshark 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (loop and CPU consumption) via a small value for a BSON document length. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/55035 - http://www.wireshark.org/security/wnpa-sec-2012-14.html - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-mongo.c?r1=44288&r2=44287&pathrev=44288 - http://secunia.com/advisories/54425 - http://an
c/trunk/epan/dissectors/packet-mongo.c?r1=44288&r2=44287&pathrev=44288 - http://secunia.com/advisories/54425 - http://anonsvn.wireshark.org/viewvc?view=revision&revision=44288 - https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_wireshark3 - http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml - http://secunia.com/advisories/51363 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7572 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15818 - http://secunia.com/advisories/50276 - https://hermes.opensuse.org/messages/15514562
CVE ID: CVE-2012-4288 State: PUBLISHED Published: 2012-08-16T10:00:00 Last Updated: 2024-08-06T20:35:08.588Z Vendors: n/a Products: n/a Problem Types: n/a Description: Integer overflow in the dissect_xtp_ecntl function in epan/dissectors/packet-xtp.c in the XTP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (loop or application crash) via a large value for a span length. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/55035 - http://www.wireshark.org/security/wnpa-sec-2012-15.html - http://secunia.com/advisories/54425 - https://blogs.oracle.com/sunse
/www.wireshark.org/security/wnpa-sec-2012-15.html - http://secunia.com/advisories/54425 - https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_wireshark3 - http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15789 - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-xtp.c?r1=44289&r2=44288&pathrev=44289 - http://secunia.com/advisories/51363 - http://lists.opensuse.org/opensuse-updates/2012-08/msg00033.html - http://anonsvn.wireshark.org/viewvc?view=revision&revision=44289 - http://secunia.com/advisories/50276 - https://hermes.opensuse.org/messages/15514562 - https://
revision&revision=44289 - http://secunia.com/advisories/50276 - https://hermes.opensuse.org/messages/15514562 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7571
CVE ID: CVE-2012-4289 State: PUBLISHED Published: 2012-08-16T10:00:00 Last Updated: 2024-08-06T20:35:08.196Z Vendors: n/a Products: n/a Problem Types: n/a Description: epan/dissectors/packet-afp.c in the AFP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (loop and CPU consumption) via a large number of ACL entries. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/55035 - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-afp.c?r1=44317&r2=44316&pathrev=44317 - http://secunia.com/advisories/54425 - http://rhn.redhat.com/errata/RHSA-2013-0
t-afp.c?r1=44317&r2=44316&pathrev=44317 - http://secunia.com/advisories/54425 - http://rhn.redhat.com/errata/RHSA-2013-0125.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A14963 - https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_wireshark3 - http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml - http://secunia.com/advisories/51363 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7603 - http://anonsvn.wireshark.org/viewvc?view=revision&revision=44317 - http://www.wireshark.org/security/wnpa-sec-2012-17.html - http://lists.opensuse.org/opensuse-updates/2012-08/msg00033.html - http://secunia.com/advisories/50276 - htt
2-17.html - http://lists.opensuse.org/opensuse-updates/2012-08/msg00033.html - http://secunia.com/advisories/50276 - https://hermes.opensuse.org/messages/15514562
CVE ID: CVE-2012-4290 State: PUBLISHED Published: 2012-08-16T10:00:00 Last Updated: 2024-08-06T20:35:08.632Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CTDB dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (loop and CPU consumption) via a malformed packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/55035 - http://secunia.com/advisories/54425 - http://rhn.redhat.com/errata/RHSA-2013-0125.html - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15619 - https://blogs.oracle.com/sunsecurity/entr
ecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15619 - https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_wireshark3 - http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7573 - http://secunia.com/advisories/51363 - http://www.wireshark.org/security/wnpa-sec-2012-23.html - http://lists.opensuse.org/opensuse-updates/2012-08/msg00033.html - http://secunia.com/advisories/50276 - https://hermes.opensuse.org/messages/15514562
CVE ID: CVE-2012-4291 State: PUBLISHED Published: 2012-08-16T10:00:00 Last Updated: 2024-08-06T20:35:08.668Z Vendors: n/a Products: n/a Problem Types: n/a Description: The CIP dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 allows remote attackers to cause a denial of service (memory consumption) via a malformed packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/55035 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15813 - http://secunia.com/advisories/54425 - http://rhn.redhat.com/errata/RHSA-2013-0125.html - http://www.wireshark.org/security/wnpa-sec-2012-
m/advisories/54425 - http://rhn.redhat.com/errata/RHSA-2013-0125.html - http://www.wireshark.org/security/wnpa-sec-2012-20.html - https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_wireshark3 - http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml - http://secunia.com/advisories/51363 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7570 - http://lists.opensuse.org/opensuse-updates/2012-08/msg00033.html - http://secunia.com/advisories/50276 - https://hermes.opensuse.org/messages/15514562
CVE ID: CVE-2012-4292 State: PUBLISHED Published: 2012-08-16T10:00:00 Last Updated: 2024-08-06T20:35:09.214Z Vendors: n/a Products: n/a Problem Types: n/a Description: The dissect_stun_message function in epan/dissectors/packet-stun.c in the STUN dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 does not properly interact with key-destruction behavior in a certain tree library, which allows remote attackers to cause a denial of service (application crash) via a malformed packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/55035 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7569 - http://secuni
ces: - http://www.securityfocus.com/bid/55035 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7569 - http://secunia.com/advisories/54425 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15158 - https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_wireshark3 - http://anonsvn.wireshark.org/viewvc/trunk/epan/emem.c?r1=44380&r2=44379&pathrev=44380 - http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml - http://secunia.com/advisories/51363 - http://www.wireshark.org/security/wnpa-sec-2012-21.html - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-stun.c?r1=44366&r2=44365&pathrev=44366 - http://anonsvn.wireshark.o
vn.wireshark.org/viewvc/trunk/epan/dissectors/packet-stun.c?r1=44366&r2=44365&pathrev=44366 - http://anonsvn.wireshark.org/viewvc?view=revision&revision=44366 - http://anonsvn.wireshark.org/viewvc?view=revision&revision=44380 - http://lists.opensuse.org/opensuse-updates/2012-08/msg00033.html - http://secunia.com/advisories/50276 - https://hermes.opensuse.org/messages/15514562
CVE ID: CVE-2012-4293 State: PUBLISHED Published: 2012-08-16T10:00:00 Last Updated: 2024-08-06T20:35:08.760Z Vendors: n/a Products: n/a Problem Types: n/a Description: plugins/ethercat/packet-ecatmb.c in the EtherCAT Mailbox dissector in Wireshark 1.4.x before 1.4.15, 1.6.x before 1.6.10, and 1.8.x before 1.8.2 does not properly handle certain integer fields, which allows remote attackers to cause a denial of service (application exit) via a malformed packet. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/55035 - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7562 - http://anonsvn.wireshark.org/viewvc?view=revision&revision=43149 - http
gs.wireshark.org/bugzilla/show_bug.cgi?id=7562 - http://anonsvn.wireshark.org/viewvc?view=revision&revision=43149 - http://secunia.com/advisories/54425 - http://anonsvn.wireshark.org/viewvc/trunk/plugins/ethercat/packet-ecatmb.c?r1=43149&r2=43148&pathrev=43149 - https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_wireshark3 - http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15527 - http://secunia.com/advisories/51363 - http://www.wireshark.org/security/wnpa-sec-2012-22.html - http://lists.opensuse.org/opensuse-updates/2012-08/msg00033.html - http://secunia.com/advisories/50276
ec-2012-22.html - http://lists.opensuse.org/opensuse-updates/2012-08/msg00033.html - http://secunia.com/advisories/50276 - https://hermes.opensuse.org/messages/15514562
CVE ID: CVE-2012-4294 State: PUBLISHED Published: 2012-08-16T10:00:00 Last Updated: 2024-08-06T20:35:08.988Z Vendors: n/a Products: n/a Problem Types: n/a Description: Buffer overflow in the channelised_fill_sdh_g707_format function in epan/dissectors/packet-erf.c in the ERF dissector in Wireshark 1.8.x before 1.8.2 allows remote attackers to execute arbitrary code via a large speed (aka rate) value. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/55035 - http://secunia.com/advisories/54425 - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-erf.c?r1=44377&r2=44376&pathrev=44377 - https://oval.cisecurity.org/repository/search/d
wvc/trunk/epan/dissectors/packet-erf.c?r1=44377&r2=44376&pathrev=44377 - https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15673 - https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_wireshark3 - http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml - http://secunia.com/advisories/51363 - http://anonsvn.wireshark.org/viewvc?view=revision&revision=44377 - http://www.wireshark.org/security/wnpa-sec-2012-16.html - https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7563 - http://secunia.com/advisories/50276 - https://hermes.opensuse.org/messages/15514562
CVE ID: CVE-2012-4295 State: PUBLISHED Published: 2012-08-16T10:00:00 Last Updated: 2024-08-06T20:35:08.208Z Vendors: n/a Products: n/a Problem Types: n/a Description: Array index error in the channelised_fill_sdh_g707_format function in epan/dissectors/packet-erf.c in the ERF dissector in Wireshark 1.8.x before 1.8.2 might allow remote attackers to cause a denial of service (application crash) via a crafted speed (aka rate) value. Additional Analyst Notes: - CVE Program Container: References: - http://www.securityfocus.com/bid/55035 - http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-erf.c?r1=44419&r2=44418&pathrev=44419 - http://secunia.com/advisories/54425 - http://anonsvn.