Design/Logic Flaw

KMPlayer 2.9.3.1210 and earlier allows remote attackers to cause a denial of service CPU consumption via a .avi file with certain large "indx truck size" and nEntriesInuse values...

CVE-2007-4941

KMPlayer 2.9.3.1210 and earlier is affected by a remote denial-of-service condition caused by processing a crafted .avi file with unusually large \

Code injection

Cisco Content Switching Modules CSM 4.2 before 4.2.3a, and Cisco Content Switching Module with SSL CSM-S 2.1 before 2.1.2a, allow remote attackers to cause a denial of service CPU consumption or reboot via sets of out-of-order TCP packets with unspecified characteristics, aka CSCsd27478...

CVE-2007-4788

CVE-2007-4788 affects Cisco Content Switching Modules (CSM) 4.2 prior to 4.2.3a and Cisco Content Switching Module with SSL (CSM-S) 2.1 prior to 2.1.2a. The vulnerability allows remote attackers to cause a denial of service through sets of out-of-order TCP packets with unspecified characteristics...

Design/Logic Flaw

Unspecified vulnerability in the server in Firebird before 2.0.2, when a Superserver/TCP/IP environment is configured, allows remote attackers to cause a denial of service CPU and memory consumption via "large network packets with garbage", aka CORE-1397...

CVE-2007-4666

In Firebird, CVE-2007-4666 describes an unspecified vulnerability in the server before 2.0.2. In a Superserver/TCP/IP setup, remote attackers can trigger a denial of service by sending large network packets with garbage (CORE-1397), consuming CPU and memory. The connected sources indicate affecte...

n.runs-SA-2007.026 - Sophos Antivirus BZip parsing Infinite Loop Advisory

n.runs AG http://www.nruns.com/ securityatnruns.com n.runs-SA-2007.026 24-Aug-2007 Vendor: Sophos, http://www.sophos.com Affected Products: Sophos Anti-Virus for Windows Sophos Anti-Virus for Unix/Linux Vulnerability: Infinite Loop DoS remote Risk: MEDIUM Vendor communication: 2007/05/07 initial...

Mandrake Linux Security Advisory : tetex (MDKSA-2007:164)

Maurycy Prodeus found an integer overflow vulnerability in the way various PDF viewers processed PDF files. An attacker could create a malicious PDF file that could cause tetex to crash and possibly execute arbitrary code open a user opening the file. In addition, tetex contains an embedded copy ...

Mandrake Linux Security Advisory : gd (MDKSA-2007:153)

GD versions prior to 2.0.35 have a number of bugs which potentially lead to denial of service and possibly other issues. Integer overflow in gdImageCreateTrueColor function in the GD Graphics Library libgd before 2.0.35 allows user-assisted remote attackers to have unspecified remote attack vecto...

CVE-2007-4243

CVE-2007-4243 affects Astaro Security Gateway (ASG) 7, via a flaw in pfilter-reporter.pl that can cause a denial of service by consuming CPU when handling certain network traffic. Public demonstrations referenced P2P and iTunes traffic consuming large data volumes. Multiple connected sources reaf...

CVE-2007-3971

CVE-2007-3971 affects ESET NOD32 Antivirus before 2.2289. The vulnerability is an integer overflow in the ASPACK packed file parser that can trigger an infinite loop, enabling remote attackers to cause CPU and disk consumption (DoS). The provided documents do not specify a remediation or patch ve...

Code injection

The 4BSD process scheduler in the FreeBSD kernel performs scheduling based on CPU billing gathered from periodic process sampling ticks, which allows local users to cause a denial of service CPU consumption by performing voluntary nanosecond sleeps that result in the process not being active duri...

Code injection

The ULE process scheduler in the FreeBSD kernel gives preference to "interactive" processes that perform voluntary sleeps, which allows local users to cause a denial of service CPU consumption, as described in "Secretly Monopolizing the CPU Without Superuser Privileges."...

CVE-2007-3723

The process scheduler in the Sun Solaris kernel does not make use of the process statistics kept by the kernel and performs scheduling based upon CPU billing gathered from periodic process sampling ticks, which allows local users to cause a denial of service CPU consumption, as described in...

CVE-2007-3722

The 4BSD process scheduler in the FreeBSD kernel performs scheduling based on CPU billing gathered from periodic process sampling ticks, which allows local users to cause a denial of service CPU consumption by performing voluntary nanosecond sleeps that result in the process not being active duri...

CVE-2007-3724

The process scheduler in the Microsoft Windows XP kernel does not make use of the process statistics kept by the kernel, performs scheduling based on CPU billing gathered from periodic process sampling ticks, and gives preference to "interactive" processes that perform voluntary sleeps, which...

Code injection

The process scheduler in the Sun Solaris kernel does not make use of the process statistics kept by the kernel and performs scheduling based upon CPU billing gathered from periodic process sampling ticks, which allows local users to cause a denial of service CPU consumption, as described in...

Code injection

The process scheduler in the Linux kernel 2.4 performs scheduling based on CPU billing gathered from periodic process sampling ticks, which allows local users to cause a denial of service CPU consumption by performing voluntary nanosecond sleeps that result in the process not being active during ...

CVE-2007-3719

The process scheduler in the Linux kernel 2.6.16 gives preference to "interactive" processes that perform voluntary sleeps, which allows local users to cause a denial of service CPU consumption, as described in "Secretly Monopolizing the CPU Without Superuser Privileges."...

Code injection

The process scheduler in the Microsoft Windows XP kernel does not make use of the process statistics kept by the kernel, performs scheduling based on CPU billing gathered from periodic process sampling ticks, and gives preference to "interactive" processes that perform voluntary sleeps, which...