2093 matches found
Design/Logic Flaw
Multiple array index errors in the Audible::Tag::readTag function in metadata/audible/audibletag.cpp in Amarok 1.4.10 through 2.0.1 allow remote attackers to cause a denial of service application crash or execute arbitrary code via an Audible Audio .aa file with a crafted 1 nlen or 2 vlen Tag...
ruby: Memory allocation failure in Ruby regex engine (remotely exploitable DoS)
The regular expression engine regex.c in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423 allows remote attackers to cause a denial of service infinite loop and crash via multiple long requests to a Ruby socket, related to memory allocation failure...
Design/Logic Flaw
The regular expression engine regex.c in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423 allows remote attackers to cause a denial of service infinite loop and crash via multiple long requests to a Ruby socket, related to memory allocation failure...
Resource Management Errors
Overview Affected versions of this package are vulnerable to Resource Management Errors. The regular expression engine regex.c in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8.7 through 1.8.7-p71, and 1.9 through r18423 allows remote attackers to cause a denial of service infinite loop an...
vsftpd 2.0.5 - deny_file Option Remote Denial of Service (2)
vsftpd 2.0.5 - denyfile Option Remote Denial of Service 2 source: https://www.securityfocus.com/bid/29322/info The 'vsftpd' FTP server is prone to a remote denial-of-service vulnerability because it fails to free allocated memory. Successfully exploiting this issue allows remote attackers to cras...
Null pointer dereference
The SuiteLink Service aka slssvc.exe in WonderWare SuiteLink before 2.0 Patch 01, as used in WonderWare InTouch 8.0, allows remote attackers to cause a denial of service NULL pointer dereference and service shutdown and possibly execute arbitrary code via a large length value in a Registration...
CVE-2008-2005
The SuiteLink Service aka slssvc.exe in WonderWare SuiteLink before 2.0 Patch 01, as used in WonderWare InTouch 8.0, allows remote attackers to cause a denial of service NULL pointer dereference and service shutdown and possibly execute arbitrary code via a large length value in a Registration...
CVE-2008-1852
ovalarmsrv in HP OpenView Network Node Manager OV NNM 7.51, 7.53, and possibly other versions allows remote attackers to cause a denial of service crash via certain requests that specify a large number of sub-arguments, which triggers a NULL pointer dereference due to memory allocation failure...
CVE-2006-3502
Unspecified vulnerability in ImageIO in Apple Mac OS X 10.4.7 allows user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted GIF image that triggers a memory allocation failure that is not properly handled...
CVE-2006-3502
Unspecified vulnerability in ImageIO in Apple Mac OS X 10.4.7 allows user-assisted attackers to cause a denial of service crash and possibly execute arbitrary code via a crafted GIF image that triggers a memory allocation failure that is not properly handled...
CVE-2004-1492
Master of Orion III 1.2.5 and earlier allows remote attackers to cause a denial of service game exit via a data packet that contains a large size specifier, which causes a large memory allocation to fail...
CVE-2002-0557
Vulnerability in OpenBSD 3.0, when using YP with netgroups in the password database, causes 1 rexec or 2 rsh to run another user's shell, or 3 atrun to change to a different user's directory, possibly due to memory allocation failures or an incorrect call to authapproval...
Three possible DoS attacks against some IOS versions.
There are three possible unreported DoS conditions in certain versions of IOS I could get my hands on. 1. When scanning all 65535 ports from a single host using nmap full connect/half connect/null/fin/ack/xmas through a Cisco 2611 running C2600-IO3-M, Version 12.16.5the router crashes. Same appli...