CVE-2007-0125

Kaspersky Antivirus Engine 6.0 for Windows and 5.5-10 for Linux are affected by a denial-of-service in the PE file handling path. The root cause is an infinite loop triggered when parsing an invalid NumberOfRvaAndSizes value in the Optional Windows Header of a Portable Executable (PE) file. An at...

CVE-2006-6252

CVE-2006-6252 affects Microsoft Windows Live Messenger 8.0 and earlier. When gestual emoticons are enabled, a remote attacker can cause denial of service by sending a long string of ":D" sequences that are interpreted as emoticons, consuming CPU resources. The NVD entry notes a network-exposed ve...

CVE-2006-6252

Microsoft Windows Live Messenger 8.0 and earlier, when gestual emoticons are enabled, allows remote attackers to cause a denial of service CPU consumption via a long string composed of ":D" sequences, which are interpreted as emoticons...

CVE-2006-6252: Undefined Security Weakness

Microsoft Windows Live Messenger 8.0 and earlier, when gestual emoticons are enabled, allows remote attackers to cause a denial of service CPU consumption via a long string composed of ":D" sequences, which are interpreted as emoticons...

ruby -- cgi.rb library Denial of Service

The official ruby site reports: Another vulnerability has been discovered in the CGI library cgi.rb that ships with Ruby which could be used by a malicious user to create a denial of service attack DoS. A specific HTTP request for any web application using cgi.rb causes CPU consumption on the...

CVE-2006-4518

Qbik WinGate 6.1.4 and earlier allows remote attackers to cause a denial of service CPU consumption via a DNS request with a self-referencing compressed name pointer, which triggers an infinite loop...

LHa: Multiple vulnerabilities

Background LHa is a console-based program for packing and unpacking LHarc archives. Description Tavis Ormandy of the Google Security Team discovered several vulnerabilities in the LZH decompression component used by LHa. The maketable function of unlzh.c contains an array index error and a buffer...

CVE-2006-5680

The libarchive library in FreeBSD 6-STABLE after 2006-09-05 and before 2006-11-08 allows context-dependent attackers to cause a denial of service CPU consumption via a malformed archive that causes libarchive to skip a region past the actual end of the archive, which triggers an infinite loop tha...

CVE-2006-5680

CVE-2006-5680 concerns the libarchive library used by FreeBSD 6-STABLE (versions after 2006-09-05 and before 2006-11-08). The issue arises when libarchive processes a malformed archive: a context-dependent attacker can trigger an infinite loop by skipping past the actual end of the archive, causi...

CVE-2006-5680

The libarchive library in FreeBSD 6-STABLE after 2006-09-05 and before 2006-11-08 allows context-dependent attackers to cause a denial of service CPU consumption via a malformed archive that causes libarchive to skip a region past the actual end of the archive, which triggers an infinite loop tha...

Debian DSA-1101-1 : courier - programming error

A bug has been discovered in the Courier Mail Server that can result in a number of processes to consume arbitrary amounts of CPU power. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from Debian Security Advisory DSA-110...

Debian DSA-1119-1 : hiki - design flaw

Akira Tanaka discovered a vulnerability in Hiki Wiki, a Wiki engine written in Ruby that allows remote attackers to cause a denial of service via high CPU consumption using by performing a diff between large and specially crafted Wiki pages. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. Th...

CVE-2006-5179

Intoto iGateway VPN and iGateway SSL-VPN allow context-dependent attackers to cause a denial of service CPU consumption via parasitic public keys with large 1 "public exponent" or 2 "public modulus" values in X.509 certificates that require extra time to process when using RSA signature...

CVE-2006-5179

Intoto iGateway VPN and iGateway SSL-VPN allow context-dependent attackers to cause a denial of service CPU consumption via parasitic public keys with large 1 "public exponent" or 2 "public modulus" values in X.509 certificates that require extra time to process when using RSA signature...

CVE-2006-5179: Undefined Security Weakness

Intoto iGateway VPN and iGateway SSL-VPN allow context-dependent attackers to cause a denial of service CPU consumption via parasitic public keys with large 1 "public exponent" or 2 "public modulus" values in X.509 certificates that require extra time to process when using RSA signature...

CVE-2006-5098

lib/exec/fetch.php in DokuWiki before 2006-03-09e allows remote attackers to cause a denial of service CPU consumption via large w and h parameters, when resizing an image...

CVE-2006-5098

DokuWiki vulnerability CVE-2006-5098 affects lib/exec/fetch.php where remote attackers can cause a denial of service (high CPU usage) by passing very large w and h values during image resizing (before 2006-03-09e). The issue is tied to image resizing parameters and does not provide details on a p...

CVE-2006-5098: Undefined Security Weakness

lib/exec/fetch.php in DokuWiki before 2006-03-09e allows remote attackers to cause a denial of service CPU consumption via large w and h parameters, when resizing an image...

Code injection

OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows attackers to cause a denial of service CPU consumption via parasitic public keys with large 1 "public exponent" or 2 "public modulus" values in X.509 certificates that require extra time to process when using RSA...

CVE-2006-2940

OpenSSL 0.9.7 before 0.9.7l, 0.9.8 before 0.9.8d, and earlier versions allows attackers to cause a denial of service CPU consumption via parasitic public keys with large 1 "public exponent" or 2 "public modulus" values in X.509 certificates that require extra time to process when using RSA...