ByteOS

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://anonsvn.wireshark.org/viewvc?view=revision&revision=44307

Resource:

x_refsource_CONFIRM

Hyperlink: https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_wireshark3

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.wireshark.org/security/wnpa-sec-2012-19.html

Resource:

x_refsource_CONFIRM

Hyperlink: http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml

Resource:

vendor-advisory

x_refsource_GENTOO

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-gsm_rlcmac.h?r1=44307&r2=44306&pathrev=44307

Resource:

x_refsource_CONFIRM

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15741

Resource:

vdb-entry

signature

x_refsource_OVAL

Resource:

third-party-advisory

x_refsource_SECUNIA

Hyperlink: https://hermes.opensuse.org/messages/15514562

Resource:

vendor-advisory

x_refsource_SUSE

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
http://www.securityfocus.com/bid/55035	vdb-entry x_refsource_BID x_transferred
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7561	x_refsource_CONFIRM x_transferred
http://secunia.com/advisories/54425	third-party-advisory x_refsource_SECUNIA x_transferred
http://anonsvn.wireshark.org/viewvc?view=revision&revision=44307	x_refsource_CONFIRM x_transferred
https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_wireshark3	x_refsource_CONFIRM x_transferred
http://www.wireshark.org/security/wnpa-sec-2012-19.html	x_refsource_CONFIRM x_transferred
http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml	vendor-advisory x_refsource_GENTOO x_transferred
http://secunia.com/advisories/51363	third-party-advisory x_refsource_SECUNIA x_transferred
http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-gsm_rlcmac.h?r1=44307&r2=44306&pathrev=44307	x_refsource_CONFIRM x_transferred
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15741	vdb-entry signature x_refsource_OVAL x_transferred
http://secunia.com/advisories/50276	third-party-advisory x_refsource_SECUNIA x_transferred
https://hermes.opensuse.org/messages/15514562	vendor-advisory x_refsource_SUSE x_transferred

Hyperlink: http://www.securityfocus.com/bid/55035

Resource:

vdb-entry

x_refsource_BID

x_transferred

Hyperlink: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7561

Resource:

x_refsource_CONFIRM

x_transferred

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://anonsvn.wireshark.org/viewvc?view=revision&revision=44307

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_wireshark3

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.wireshark.org/security/wnpa-sec-2012-19.html

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml

Resource:

vendor-advisory

x_refsource_GENTOO

x_transferred

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-gsm_rlcmac.h?r1=44307&r2=44306&pathrev=44307

Resource:

x_refsource_CONFIRM

x_transferred

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15741

Resource:

vdb-entry

signature

x_refsource_OVAL

x_transferred

Resource:

third-party-advisory

x_refsource_SECUNIA

x_transferred

Hyperlink: https://hermes.opensuse.org/messages/15514562

Resource:

vendor-advisory

x_refsource_SUSE

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:cve@mitre.org

Published At:16 Aug, 2012 | 10:38

Updated At:11 Apr, 2025 | 00:51

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	2.0	8.3	HIGH	AV:A/AC:L/Au:N/C:C/I:C/A:C
Primary	2.0	8.3	HIGH	AV:A/AC:L/Au:N/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 8.3

Base severity: HIGH

Vector:

AV:A/AC:L/Au:N/C:C/I:C/A:C

Type: Primary

Version: 2.0

Base score: 8.3

Base severity: HIGH

Vector:

AV:A/AC:L/Au:N/C:C/I:C/A:C

CPE Matches

cpe:2.3:a:wireshark:wireshark:1.8.0:*:*:*:*:*:*:*

>>wireshark>>1.8.0

cpe:2.3:a:wireshark:wireshark:1.8.1:*:*:*:*:*:*:*

>>wireshark>>1.8.1

cpe:2.3:a:wireshark:wireshark:1.6.0:*:*:*:*:*:*:*

>>wireshark>>1.6.0

cpe:2.3:a:wireshark:wireshark:1.6.1:*:*:*:*:*:*:*

>>wireshark>>1.6.1

cpe:2.3:a:wireshark:wireshark:1.6.2:*:*:*:*:*:*:*

>>wireshark>>1.6.2

cpe:2.3:a:wireshark:wireshark:1.6.3:*:*:*:*:*:*:*

>>wireshark>>1.6.3

cpe:2.3:a:wireshark:wireshark:1.6.4:*:*:*:*:*:*:*

>>wireshark>>1.6.4

cpe:2.3:a:wireshark:wireshark:1.6.5:*:*:*:*:*:*:*

>>wireshark>>1.6.5

cpe:2.3:a:wireshark:wireshark:1.6.6:*:*:*:*:*:*:*

>>wireshark>>1.6.6

cpe:2.3:a:wireshark:wireshark:1.6.7:*:*:*:*:*:*:*

>>wireshark>>1.6.7

cpe:2.3:a:wireshark:wireshark:1.6.8:*:*:*:*:*:*:*

>>wireshark>>1.6.8

cpe:2.3:a:wireshark:wireshark:1.6.9:*:*:*:*:*:*:*

>>wireshark>>1.6.9

Sun Microsystems (Oracle Corporation)

>>sunos>>5.11

cpe:2.3:o:sun:sunos:5.11:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-119	Primary	nvd@nist.gov

CWE ID: CWE-119

Type: Primary

Source: nvd@nist.gov

References

Hyperlink	Source	Resource
http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-gsm_rlcmac.h?r1=44307&r2=44306&pathrev=44307	cve@mitre.org	Patch
http://anonsvn.wireshark.org/viewvc?view=revision&revision=44307	cve@mitre.org	Patch
http://secunia.com/advisories/50276	cve@mitre.org	N/A
http://secunia.com/advisories/51363	cve@mitre.org	N/A
http://secunia.com/advisories/54425	cve@mitre.org	N/A
http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml	cve@mitre.org	N/A
http://www.securityfocus.com/bid/55035	cve@mitre.org	N/A
http://www.wireshark.org/security/wnpa-sec-2012-19.html	cve@mitre.org	Vendor Advisory
https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_wireshark3	cve@mitre.org	N/A
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7561	cve@mitre.org	N/A
https://hermes.opensuse.org/messages/15514562	cve@mitre.org	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15741	cve@mitre.org	N/A
http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-gsm_rlcmac.h?r1=44307&r2=44306&pathrev=44307	af854a3a-2127-422b-91ae-364da2661108	Patch
http://anonsvn.wireshark.org/viewvc?view=revision&revision=44307	af854a3a-2127-422b-91ae-364da2661108	Patch
http://secunia.com/advisories/50276	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/51363	af854a3a-2127-422b-91ae-364da2661108	N/A
http://secunia.com/advisories/54425	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.securityfocus.com/bid/55035	af854a3a-2127-422b-91ae-364da2661108	N/A
http://www.wireshark.org/security/wnpa-sec-2012-19.html	af854a3a-2127-422b-91ae-364da2661108	Vendor Advisory
https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_wireshark3	af854a3a-2127-422b-91ae-364da2661108	N/A
https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7561	af854a3a-2127-422b-91ae-364da2661108	N/A
https://hermes.opensuse.org/messages/15514562	af854a3a-2127-422b-91ae-364da2661108	N/A
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15741	af854a3a-2127-422b-91ae-364da2661108	N/A

Hyperlink: http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-gsm_rlcmac.h?r1=44307&r2=44306&pathrev=44307

Source: cve@mitre.org

Resource:

Patch

Hyperlink: http://anonsvn.wireshark.org/viewvc?view=revision&revision=44307

Source: cve@mitre.org

Resource:

Patch

Source: cve@mitre.org

Resource: N/A

Source: cve@mitre.org

Resource: N/A

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/55035

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://www.wireshark.org/security/wnpa-sec-2012-19.html

Source: cve@mitre.org

Resource:

Vendor Advisory

Hyperlink: https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_wireshark3

Source: cve@mitre.org

Resource: N/A

Hyperlink: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7561

Source: cve@mitre.org

Resource: N/A

Hyperlink: https://hermes.opensuse.org/messages/15514562

Source: cve@mitre.org

Resource: N/A

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15741

Source: cve@mitre.org

Resource: N/A

Hyperlink: http://anonsvn.wireshark.org/viewvc/trunk/epan/dissectors/packet-gsm_rlcmac.h?r1=44307&r2=44306&pathrev=44307

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Patch

Hyperlink: http://anonsvn.wireshark.org/viewvc?view=revision&revision=44307

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Patch

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.gentoo.org/security/en/glsa/glsa-201308-05.xml

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.securityfocus.com/bid/55035

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: http://www.wireshark.org/security/wnpa-sec-2012-19.html

Source: af854a3a-2127-422b-91ae-364da2661108

Resource:

Vendor Advisory

Hyperlink: https://blogs.oracle.com/sunsecurity/entry/multiple_vulnerabilities_in_wireshark3

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://bugs.wireshark.org/bugzilla/show_bug.cgi?id=7561

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://hermes.opensuse.org/messages/15514562

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Hyperlink: https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A15741

Source: af854a3a-2127-422b-91ae-364da2661108

Resource: N/A

Similar CVEs

198Records found

CVE-2010-2284

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-8.3||HIGH

EPSS-3.04% / 86.14%

7 Day CHG~0.00%

Published-15 Jun, 2010 | 01:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in the ASN.1 BER dissector in Wireshark 0.10.13 through 1.0.13 and 1.2.0 through 1.2.8 has unknown impact and remote attack vectors.

Product-wireshark n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-2287

Matching Score-10

Assigner-MITRE Corporation

Matching Score-10

Assigner-MITRE Corporation

CVSS Score-8.3||HIGH

EPSS-3.04% / 86.14%

7 Day CHG~0.00%

Published-15 Jun, 2010 | 01:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in the SigComp Universal Decompressor Virtual Machine dissector in Wireshark 0.10.8 through 1.0.13 and 1.2.0 through 1.2.8 has unknown impact and remote attack vectors.

Product-wireshark n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2017-9348

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-7.5||HIGH

EPSS-0.78% / 72.68%

7 Day CHG~0.00%

Published-02 Jun, 2017 | 05:04

Updated-20 Apr, 2025 | 01:37

In Wireshark 2.2.0 to 2.2.6, the DOF dissector could read past the end of a buffer. This was addressed in epan/dissectors/packet-dof.c by validating a size value.

Product-wireshark n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2017-9351

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-7.5||HIGH

EPSS-0.77% / 72.51%

7 Day CHG~0.00%

Published-02 Jun, 2017 | 05:04

Updated-20 Apr, 2025 | 01:37

In Wireshark 2.2.0 to 2.2.6 and 2.0.0 to 2.0.12, the DHCP dissector could read past the end of a buffer. This was addressed in epan/dissectors/packet-bootp.c by extracting the Vendor Class Identifier more carefully.

Product-wireshark n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2450

Matching Score-6

Matching Score-6

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-10||HIGH

EPSS-3.04% / 86.13%

7 Day CHG~0.00%

Published-11 Nov, 2011 | 16:00

Updated-11 Apr, 2025 | 00:51

Product-linux_kernel windows solaris android flash_player adobe_air mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-4920

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-5||MEDIUM

EPSS-0.35% / 56.65%

7 Day CHG~0.00%

Published-29 Jul, 2013 | 19:00

Updated-11 Apr, 2025 | 00:51

The P1 dissector in Wireshark 1.10.x before 1.10.1 does not properly initialize a global variable, which allows remote attackers to cause a denial of service (application crash) via a crafted packet.

Product-wireshark n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-1999-0069

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-8.4||HIGH

EPSS-0.69% / 70.91%

7 Day CHG~0.00%

Published-29 Sep, 1999 | 04:00

Updated-03 Apr, 2025 | 01:03

Solaris ufsrestore buffer overflow.

Vendor-n/a Sun Microsystems (Oracle Corporation)

Product-sunos n/a sunos

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-4933

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-5||MEDIUM

EPSS-1.50% / 80.40%

7 Day CHG~0.00%

Published-29 Jul, 2013 | 19:00

Updated-11 Apr, 2025 | 00:51

The netmon_open function in wiretap/netmon.c in the Netmon file parser in Wireshark 1.8.x before 1.8.9 and 1.10.x before 1.10.1 does not properly allocate memory, which allows remote attackers to cause a denial of service (application crash) via a crafted packet-trace file.

Product-wireshark n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-5720

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-5||MEDIUM

EPSS-0.38% / 58.69%

7 Day CHG~0.00%

Published-13 Sep, 2013 | 18:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in the RTPS dissector in Wireshark 1.8.x before 1.8.10 and 1.10.x before 1.10.2 allows remote attackers to cause a denial of service (application crash) via a crafted packet.

Product-wireshark n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-4081

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-5||MEDIUM

EPSS-1.26% / 78.59%

7 Day CHG~0.00%

Published-09 Jun, 2013 | 21:00

Updated-11 Apr, 2025 | 00:51

The http_payload_subdissector function in epan/dissectors/packet-http.c in the HTTP dissector in Wireshark 1.6.x before 1.6.16 and 1.8.x before 1.8.8 does not properly determine when to use a recursive approach, which allows remote attackers to cause a denial of service (stack consumption) via a crafted packet.

Vendor-n/a Wireshark Foundation Debian GNU/Linux openSUSE

Product-wireshark debian_linux opensuse n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-4077

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-5||MEDIUM

EPSS-1.06% / 76.74%

7 Day CHG~0.00%

Published-09 Jun, 2013 | 21:00

Updated-11 Apr, 2025 | 00:51

Array index error in the NBAP dissector in Wireshark 1.8.x before 1.8.8 allows remote attackers to cause a denial of service (application crash) via a crafted packet, related to nbap.cnf and packet-nbap.c.

Vendor-n/a Wireshark Foundation Debian GNU/Linux openSUSE

Product-wireshark debian_linux opensuse n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-4079

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-5||MEDIUM

EPSS-0.84% / 73.69%

7 Day CHG~0.00%

Published-09 Jun, 2013 | 21:00

Updated-11 Apr, 2025 | 00:51

The dissect_schedule_message function in epan/dissectors/packet-gsm_cbch.c in the GSM CBCH dissector in Wireshark 1.8.x before 1.8.8 allows remote attackers to cause a denial of service (infinite loop and application hang) via a crafted packet.

Vendor-n/a Wireshark Foundation openSUSE

Product-wireshark opensuse n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-4080

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-5||MEDIUM

EPSS-0.84% / 73.69%

7 Day CHG~0.00%

Published-09 Jun, 2013 | 21:00

Updated-11 Apr, 2025 | 00:51

The dissect_r3_upstreamcommand_queryconfig function in epan/dissectors/packet-assa_r3.c in the Assa Abloy R3 dissector in Wireshark 1.8.x before 1.8.8 does not properly handle a zero-length item, which allows remote attackers to cause a denial of service (infinite loop, and CPU and memory consumption) via a crafted packet.

Product-wireshark n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-3557

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-5||MEDIUM

EPSS-4.18% / 88.24%

7 Day CHG~0.00%

Published-25 May, 2013 | 01:00

Updated-11 Apr, 2025 | 00:51

The dissect_ber_choice function in epan/dissectors/packet-ber.c in the ASN.1 BER dissector in Wireshark 1.6.x before 1.6.15 and 1.8.x before 1.8.7 does not properly initialize a certain variable, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.

Vendor-n/a Wireshark Foundation Debian GNU/Linux openSUSE

Product-wireshark debian_linux opensuse n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-2477

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-3.3||LOW

EPSS-0.36% / 57.38%

7 Day CHG~0.00%

Published-07 Mar, 2013 | 15:00

Updated-11 Apr, 2025 | 00:51

The CSN.1 dissector in Wireshark 1.8.x before 1.8.6 does not properly manage function pointers, which allows remote attackers to cause a denial of service (application crash) via a malformed packet.

Vendor-n/a Wireshark Foundation openSUSE

Product-wireshark opensuse n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-1588

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-2.9||LOW

EPSS-0.51% / 65.34%

7 Day CHG~0.00%

Published-03 Feb, 2013 | 01:00

Updated-11 Apr, 2025 | 00:51

Multiple buffer overflows in the dissect_pft_fec_detailed function in the DCP-ETSI dissector in epan/dissectors/packet-dcp-etsi.c in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 allow remote attackers to cause a denial of service (application crash) via a malformed packet.

Product-wireshark n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-1590

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-2.9||LOW

EPSS-0.29% / 51.70%

7 Day CHG~0.00%

Published-03 Feb, 2013 | 01:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in the NTLMSSP dissector in Wireshark 1.6.x before 1.6.13 and 1.8.x before 1.8.5 allows remote attackers to cause a denial of service (application crash) via a malformed packet.

Product-wireshark n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2013-1493

Matching Score-6

Assigner-Oracle

Matching Score-6

Assigner-Oracle

CVSS Score-10||HIGH

EPSS-91.90% / 99.68%

7 Day CHG~0.00%

Published-04 Mar, 2013 | 16:00

Updated-11 Apr, 2025 | 00:51

The color management (CMM) functionality in the 2D component in Oracle Java SE 7 Update 15 and earlier, 6 Update 41 and earlier, and 5.0 Update 40 and earlier allows remote attackers to execute arbitrary code or cause a denial of service (crash) via an image with crafted raster parameters, which triggers (1) an out-of-bounds read or (2) memory corruption in the JVM, as exploited in the wild in February 2013.

Vendor-n/a Sun Microsystems (Oracle Corporation)Oracle Corporation

Product-jre jdk n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-5240

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-5.8||MEDIUM

EPSS-0.98% / 75.75%

7 Day CHG~0.00%

Published-04 Oct, 2012 | 19:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in the dissect_tlv function in epan/dissectors/packet-ldp.c in the LDP dissector in Wireshark 1.8.x before 1.8.3 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via a malformed packet.

Product-wireshark n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-4294

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-5.8||MEDIUM

EPSS-3.42% / 86.97%

7 Day CHG~0.00%

Published-16 Aug, 2012 | 10:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in the channelised_fill_sdh_g707_format function in epan/dissectors/packet-erf.c in the ERF dissector in Wireshark 1.8.x before 1.8.2 allows remote attackers to execute arbitrary code via a large speed (aka rate) value.

Vendor-n/a Sun Microsystems (Oracle Corporation)Wireshark Foundation

Product-wireshark sunos n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2012-2394

Matching Score-6

Assigner-Red Hat, Inc.

Matching Score-6

Assigner-Red Hat, Inc.

CVSS Score-3.3||LOW

EPSS-1.82% / 82.14%

7 Day CHG~0.00%

Published-30 Jun, 2012 | 10:00

Updated-11 Apr, 2025 | 00:51

Wireshark 1.4.x before 1.4.13 and 1.6.x before 1.6.8 on the SPARC and Itanium platforms does not properly perform data alignment for a certain structure member, which allows remote attackers to cause a denial of service (application crash) via a (1) ICMP or (2) ICMPv6 Echo Request packet.

Product-wireshark n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2005-3269

Matching Score-6

Assigner-Red Hat, Inc.

Product-one_administration_server one_directory_server java_system_directory_proxy_server java_system_directory_server n/a

Matching Score-6

Assigner-Red Hat, Inc.

CVSS Score-7.5||HIGH

EPSS-4.53% / 88.72%

7 Day CHG~0.00%

Published-20 Oct, 2005 | 04:00

Updated-03 Apr, 2025 | 01:03

Stack-based buffer overflow in help.cgi in the HTTP administrative interface for (1) Sun Java System Directory Server 5.2 2003Q4, 2004Q2, and 2005Q1, (2) Red Hat Directory Server and (3) Certificate Server before 7.1 SP1, (4) Sun ONE Directory Server 5.1 SP4 and earlier, and (5) Sun ONE Administration Server 5.2 allows remote attackers to cause a denial of service (admin server crash), or local users to gain root privileges.

Vendor-n/a Sun Microsystems (Oracle Corporation)

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2425

Matching Score-6

Matching Score-6

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-10||HIGH

EPSS-9.78% / 92.65%

7 Day CHG~0.00%

Published-10 Aug, 2011 | 22:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2135, CVE-2011-2140, and CVE-2011-2417.

Product-linux_kernel windows android flash_player sunos adobe_air mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2010-0361

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-10||HIGH

EPSS-88.39% / 99.47%

7 Day CHG~0.00%

Published-20 Jan, 2010 | 16:00

Updated-11 Apr, 2025 | 00:51

Stack-based buffer overflow in the WebDAV implementation in webservd in Sun Java System Web Server (aka SJWS) 7.0 Update 7 allows remote attackers to cause a denial of service (daemon crash) and possibly have unspecified other impact via a long URI in an HTTP OPTIONS request.

Vendor-n/a Sun Microsystems (Oracle Corporation)

Product-java_system_web_server n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2445

Matching Score-6

Matching Score-6

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-10||HIGH

EPSS-1.77% / 81.89%

7 Day CHG~0.00%

Published-11 Nov, 2011 | 16:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, CVE-2011-2459, and CVE-2011-2460.

Product-linux_kernel windows solaris android flash_player adobe_air mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2456

Matching Score-6

Matching Score-6

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-10||HIGH

EPSS-5.06% / 89.37%

7 Day CHG~0.00%

Published-11 Nov, 2011 | 16:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code via unspecified vectors.

Product-linux_kernel windows solaris android flash_player adobe_air mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2110

Matching Score-6

Matching Score-6

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-10||HIGH

EPSS-91.43% / 99.65%

7 Day CHG~0.00%

Published-16 Jun, 2011 | 23:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.181.26 on Windows, Mac OS X, Linux, and Solaris, and 10.3.185.23 and earlier on Android, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, as exploited in the wild in June 2011.

Product-linux_kernel windows android flash_player sunos mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2453

Matching Score-6

Matching Score-6

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-10||HIGH

EPSS-1.77% / 81.89%

7 Day CHG~0.00%

Published-11 Nov, 2011 | 16:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2445, CVE-2011-2451, CVE-2011-2452, CVE-2011-2454, CVE-2011-2455, CVE-2011-2459, and CVE-2011-2460.

Product-linux_kernel windows solaris android flash_player adobe_air mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2457

Matching Score-6

Matching Score-6

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-10||HIGH

EPSS-5.06% / 89.37%

7 Day CHG~0.00%

Published-11 Nov, 2011 | 16:00

Updated-11 Apr, 2025 | 00:51

Stack-based buffer overflow in Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code via unspecified vectors.

Product-linux_kernel windows solaris android flash_player adobe_air mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2140

Matching Score-6

Matching Score-6

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-10||HIGH

EPSS-89.83% / 99.55%

7 Day CHG~0.00%

Published-10 Aug, 2011 | 22:00

Updated-11 Apr, 2025 | 00:51

Product-linux_kernel windows android flash_player sunos adobe_air mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2130

Matching Score-6

Matching Score-6

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-10||HIGH

EPSS-8.39% / 91.94%

7 Day CHG~0.00%

Published-10 Aug, 2011 | 21:16

Updated-11 Apr, 2025 | 00:51

Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2134, CVE-2011-2137, CVE-2011-2414, and CVE-2011-2415.

Product-linux_kernel windows android flash_player sunos adobe_air mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2713

Matching Score-6

Assigner-Red Hat, Inc.

Matching Score-6

Assigner-Red Hat, Inc.

CVSS Score-4.3||MEDIUM

EPSS-1.54% / 80.63%

7 Day CHG~0.00%

Published-21 Oct, 2011 | 18:00

Updated-11 Apr, 2025 | 00:51

oowriter in OpenOffice.org 3.3.0 and LibreOffice before 3.4.3 allows user-assisted remote attackers to cause a denial of service (crash) via a crafted DOC file that triggers an out-of-bounds read in the DOC sprm parser.

Vendor-libreoffice n/a Sun Microsystems (Oracle Corporation)

Product-libreoffice openoffice.org n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2451

Matching Score-6

Matching Score-6

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-10||HIGH

EPSS-1.77% / 81.89%

7 Day CHG~0.00%

Published-11 Nov, 2011 | 16:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2445, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, CVE-2011-2459, and CVE-2011-2460.

Product-linux_kernel windows solaris android flash_player adobe_air mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2134

Matching Score-6

Matching Score-6

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-10||HIGH

EPSS-8.39% / 91.94%

7 Day CHG~0.00%

Published-10 Aug, 2011 | 21:16

Updated-11 Apr, 2025 | 00:51

Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2130, CVE-2011-2137, CVE-2011-2414, and CVE-2011-2415.

Product-linux_kernel windows android flash_player sunos adobe_air mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2414

Matching Score-6

Matching Score-6

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-10||HIGH

EPSS-13.36% / 93.91%

7 Day CHG~0.00%

Published-10 Aug, 2011 | 22:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2130, CVE-2011-2134, CVE-2011-2137, and CVE-2011-2415.

Product-linux_kernel windows android flash_player sunos adobe_air mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2455

Matching Score-6

Matching Score-6

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-10||HIGH

EPSS-1.77% / 81.89%

7 Day CHG~0.00%

Published-11 Nov, 2011 | 16:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2445, CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454, CVE-2011-2459, and CVE-2011-2460.

Product-linux_kernel windows solaris android flash_player adobe_air mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2135

Matching Score-6

Matching Score-6

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-10||HIGH

EPSS-7.80% / 91.60%

7 Day CHG~0.00%

Published-10 Aug, 2011 | 22:00

Updated-11 Apr, 2025 | 00:51

Product-linux_kernel windows android flash_player sunos adobe_air mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2452

Matching Score-6

Matching Score-6

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-10||HIGH

EPSS-1.77% / 81.89%

7 Day CHG~0.00%

Published-11 Nov, 2011 | 16:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2445, CVE-2011-2451, CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, CVE-2011-2459, and CVE-2011-2460.

Product-linux_kernel windows solaris android flash_player adobe_air mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2459

Matching Score-6

Matching Score-6

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-10||HIGH

EPSS-1.77% / 81.89%

7 Day CHG~0.00%

Published-11 Nov, 2011 | 16:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2445, CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, and CVE-2011-2460.

Product-linux_kernel windows solaris android flash_player adobe_air mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2417

Matching Score-6

Matching Score-6

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-10||HIGH

EPSS-9.78% / 92.65%

7 Day CHG~0.00%

Published-10 Aug, 2011 | 22:00

Updated-11 Apr, 2025 | 00:51

Product-linux_kernel windows android flash_player sunos adobe_air mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-1959

Matching Score-6

Assigner-Red Hat, Inc.

Matching Score-6

Assigner-Red Hat, Inc.

CVSS Score-4.3||MEDIUM

EPSS-2.26% / 83.96%

7 Day CHG~0.00%

Published-06 Jun, 2011 | 19:00

Updated-11 Apr, 2025 | 00:51

The snoop_read function in wiretap/snoop.c in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 does not properly handle certain virtualizable buffers, which allows remote attackers to cause a denial of service (application crash) via a large length value in a snoop file that triggers a stack-based buffer over-read.

Product-wireshark n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2454

Matching Score-6

Matching Score-6

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-10||HIGH

EPSS-1.77% / 81.89%

7 Day CHG~0.00%

Published-11 Nov, 2011 | 16:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2445, CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2455, CVE-2011-2459, and CVE-2011-2460.

Product-linux_kernel windows solaris android flash_player adobe_air mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2415

Matching Score-6

Matching Score-6

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-10||HIGH

EPSS-13.36% / 93.91%

7 Day CHG~0.00%

Published-10 Aug, 2011 | 22:00

Updated-11 Apr, 2025 | 00:51

Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2130, CVE-2011-2134, CVE-2011-2137, and CVE-2011-2414.

Product-linux_kernel windows android flash_player sunos adobe_air mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2424

Matching Score-6

Matching Score-6

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-13.76% / 94.02%

7 Day CHG~0.00%

Published-15 Aug, 2011 | 21:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted SWF file, as demonstrated by "about 400 unique crash signatures."

Product-linux_kernel windows android flash_player sunos adobe_air mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2427

Matching Score-6

Matching Score-6

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-2.42% / 84.49%

7 Day CHG~0.00%

Published-22 Sep, 2011 | 01:00

Updated-11 Apr, 2025 | 00:51

Stack-based buffer overflow in the ActionScript Virtual Machine (AVM) component in Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7 on Android, allows attackers to execute arbitrary code or cause a denial of service via unspecified vectors.

Product-linux_kernel windows android flash_player sunos mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2460

Matching Score-6

Matching Score-6

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-10||HIGH

EPSS-1.77% / 81.89%

7 Day CHG~0.00%

Published-11 Nov, 2011 | 16:00

Updated-11 Apr, 2025 | 00:51

Adobe Flash Player before 10.3.183.11 and 11.x before 11.1.102.55 on Windows, Mac OS X, Linux, and Solaris and before 11.1.102.59 on Android, and Adobe AIR before 3.1.0.4880, allows attackers to execute arbitrary code or cause a denial of service (memory corruption) via unspecified vectors, a different vulnerability than CVE-2011-2445, CVE-2011-2451, CVE-2011-2452, CVE-2011-2453, CVE-2011-2454, CVE-2011-2455, and CVE-2011-2459.

Product-linux_kernel windows solaris android flash_player adobe_air mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2137

Matching Score-6

Matching Score-6

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-10||HIGH

EPSS-8.39% / 91.94%

7 Day CHG~0.00%

Published-10 Aug, 2011 | 21:16

Updated-11 Apr, 2025 | 00:51

Buffer overflow in Adobe Flash Player before 10.3.183.5 on Windows, Mac OS X, Linux, and Solaris and before 10.3.186.3 on Android, and Adobe AIR before 2.7.1 on Windows and Mac OS X and before 2.7.1.1961 on Android, allows attackers to execute arbitrary code via unspecified vectors, a different vulnerability than CVE-2011-2130, CVE-2011-2134, CVE-2011-2414, and CVE-2011-2415.

Product-linux_kernel windows android flash_player sunos adobe_air mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-1591

Matching Score-6

Assigner-Red Hat, Inc.

Matching Score-6

Assigner-Red Hat, Inc.

CVSS Score-9.3||HIGH

EPSS-77.80% / 98.96%

7 Day CHG~0.00%

Published-29 Apr, 2011 | 22:00

Updated-11 Apr, 2025 | 00:51

Stack-based buffer overflow in the DECT dissector in epan/dissectors/packet-dect.c in Wireshark 1.4.x before 1.4.5 allows remote attackers to execute arbitrary code via a crafted .pcap file.

Product-wireshark n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2011-2426

Matching Score-6

Matching Score-6

Vendor-n/a Microsoft Corporation Linux Kernel Organization, Inc Google LLC Sun Microsystems (Oracle Corporation)Apple Inc.Adobe Inc.

CVSS Score-9.3||HIGH

EPSS-11.68% / 93.41%

7 Day CHG~0.00%

Published-22 Sep, 2011 | 01:00

Updated-11 Apr, 2025 | 00:51

Stack-based buffer overflow in the ActionScript Virtual Machine (AVM) component in Adobe Flash Player before 10.3.183.10 on Windows, Mac OS X, Linux, and Solaris, and before 10.3.186.7 on Android, allows remote attackers to execute arbitrary code via unspecified vectors.

Product-linux_kernel windows android flash_player sunos mac_os_x n/a

CWE ID-CWE-119

Improper Restriction of Operations within the Bounds of a Memory Buffer

CVE-2014-5162

Matching Score-6

Assigner-MITRE Corporation

Matching Score-6

Assigner-MITRE Corporation

CVSS Score-5||MEDIUM

EPSS-0.22% / 44.52%

7 Day CHG~0.00%

Published-01 Aug, 2014 | 10:00

Updated-12 Apr, 2025 | 10:46

The read_new_line function in wiretap/catapult_dct2000.c in the Catapult DCT2000 dissector in Wireshark 1.10.x before 1.10.9 does not properly strip '\n' and '\r' characters, which allows remote attackers to cause a denial of service (off-by-one buffer underflow and application crash) via a crafted packet.