Lucene search

K
cveMitreCVE-2009-3276
HistorySep 21, 2009 - 7:30 p.m.

CVE-2009-3276

2009-09-2119:30:00
mitre
web.nvd.nist.gov
20
cve-2009-3276
zoran
winformsadvansed
regeulardatatoxml
form1.cs
nasd core.net terelik
corenet1
denial of service
cpu consumption
input string
regular expression
redos vulnerability

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

47.9%

Zoran/WinFormsAdvansed/RegeularDataToXML/Form1.cs in WinFormsAdvansed in NASD CORE.NET Terelik (aka corenet1) allows context-dependent attackers to cause a denial of service (CPU consumption) via an input string composed of many alphabetic characters followed by a ! (exclamation point), related to a certain regular expression, aka a “ReDoS” vulnerability.

Affected configurations

Nvd
Node
nasdcorenet1Match1.2
OR
nasdcorenet1Match1.7
OR
nasdcorenet1Match1.8
OR
nasdcorenet1Match1.9
OR
nasdcorenet1Match1.10
OR
nasdcorenet1Match1.12
OR
nasdcorenet1Match1.13
OR
nasdcorenet1Match1.15
OR
nasdcorenet1Match1.17
OR
nasdcorenet1Match1.18
OR
nasdcorenet1Match1.19
OR
nasdcorenet1Match1.24
OR
nasdcorenet1Match2.7
OR
nasdcorenet1Match2.8
OR
nasdcorenet1Match2.9
OR
nasdcorenet1Match2.11
OR
nasdcorenet1Match2.12
OR
nasdcorenet1Match2.13
OR
nasdcorenet1Match2.14
OR
nasdcorenet1Match2.15
OR
nasdcorenet1Match2.16
OR
nasdcorenet1Match2.17
OR
nasdcorenet1Match2.18
OR
nasdcorenet1Match2.19
OR
nasdcorenet1Match3.2
OR
nasdcorenet1Match3.11
OR
nasdcorenet1Match3.12
OR
nasdcorenet1Match3.13
OR
nasdcorenet1Match3.14
OR
nasdcorenet1Match3.15
OR
nasdcorenet1Match3.16
VendorProductVersionCPE
nasdcorenet11.2cpe:2.3:a:nasd:corenet1:1.2:*:*:*:*:*:*:*
nasdcorenet11.7cpe:2.3:a:nasd:corenet1:1.7:*:*:*:*:*:*:*
nasdcorenet11.8cpe:2.3:a:nasd:corenet1:1.8:*:*:*:*:*:*:*
nasdcorenet11.9cpe:2.3:a:nasd:corenet1:1.9:*:*:*:*:*:*:*
nasdcorenet11.10cpe:2.3:a:nasd:corenet1:1.10:*:*:*:*:*:*:*
nasdcorenet11.12cpe:2.3:a:nasd:corenet1:1.12:*:*:*:*:*:*:*
nasdcorenet11.13cpe:2.3:a:nasd:corenet1:1.13:*:*:*:*:*:*:*
nasdcorenet11.15cpe:2.3:a:nasd:corenet1:1.15:*:*:*:*:*:*:*
nasdcorenet11.17cpe:2.3:a:nasd:corenet1:1.17:*:*:*:*:*:*:*
nasdcorenet11.18cpe:2.3:a:nasd:corenet1:1.18:*:*:*:*:*:*:*
Rows per page:
1-10 of 311

CVSS2

5

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

AI Score

6.5

Confidence

High

EPSS

0.001

Percentile

47.9%

Related for CVE-2009-3276