CVE-2005-4134

CVE-2005-4134 affects Mozilla Firefox 1.5, Netscape 8.x (8.0.4 and 7.2) and K-Meleon prior to 0.9.12. A remote attacker can cause a denial of service (high CPU usage and delayed startup) by presenting a website with a large title, which is stored in history.dat but not efficiently processed durin...

CVE-2005-4134

Mozilla Firefox 1.5, Netscape 8.0.4 and 7.2, and K-Meleon before 0.9.12 allows remote attackers to cause a denial of service CPU consumption and delayed application startup via a web site with a large title, which is recorded in history.dat but not processed efficiently during startup. NOTE:...

CVE-2005-4014

stat.php in PHP Web Statistik 1.4 allows remote attackers to cause a denial of service CPU consumption via a large lastnumber value...

CVE-2005-4014

stat.php in PHP Web Statistik 1.4 allows remote attackers to cause a denial of service CPU consumption via a large lastnumber value...

CVE-2004-2647

CVE-2004-2647 concerns Free Web Chat 2.0, where remote attackers can cause a denial of service by opening multiple connections from the same user, leading to CPU consumption and partial availability impact. The available records identify the affected product as Free Web Chat 2.0 and describe the ...

CVE-2005-3945

The CVE-2005-3945 entry describes a vulnerability in the SynAttackProtect protection of Microsoft Windows 2003 (before SP1) and Windows 2000 (before SP4 with Update Roll-up). The issue arises from using a hash of predictable data, which enables a remote attacker to cause high CPU usage by sending...

CVE-2005-3945

The SynAttackProtect protection in Microsoft Windows 2003 before SP1 and Windows 2000 before SP4 with Update Roll-up uses a hash of predictable data, which allows remote attackers to cause a denial of service CPU consumption via a flood of SYN packets that produce identical hash values, which slo...

CVE-2005-3896

Mozilla allows remote attackers to cause a denial of service CPU consumption via a Javascript BODY onload event that calls the window function...

CVE-2005-3896

The CVE-2005-3896 entry details a remote DoS condition in Mozilla where a Javascript BODY onload event calls the window function, causing CPU consumption. Supported sources (NVD, Ubuntu, Debian, CVE lists) confirm the vulnerability description and impact as a CPU-based denial of service. Affected...

CVE-2005-3899

CVE-2005-3899 concerns Google Talk’s automatic update mechanism. The vulnerability allows remote attackers to trigger a denial of service by poisoning a target’s DNS cache and forcing a large update file to be processed, which consumes CPU and memory during signature verification. The provided do...

CVE-2004-2583

The CVE-2004-2583 entry describes a denial-of-service condition in SmarterTools SmarterMail (versions 1.6.1511 and 1.6.1529) where remote attackers can cause high CPU usage by opening a large number of simultaneous connections to TCP port 25. The available sources confirm the affected product and...

CVE-2002-2206

The CVE-2002-2206 entry concerns Norton AntiVirus 2001’s POP3 proxy service (POPROXY.EXE). The vulnerability arises when a local user uses a long username containing multiple /localhost entries, leading to CPU exhaustion and a crash (denial of service). The connected sources reiterate the same af...

CVE-2005-3510

CVE-2005-3510 affects Apache Tomcat 5.5.0–5.5.11, allowing a DoS via a huge number of simultaneous directory-list requests, causing CPU exhaustion. The Red Hat advisory RHSA-2010:0602 notes remediation by upgrading the Tomcat component in Red Hat Certificate System to version 5.5.23. Other OSV en...

TinyWeb < 1.93 Multiple Vulnerabilities

TinyWeb is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2003 Matt North Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptoid"1.3.6.1.4.1.25623.1.0.11894...

CVE-2004-2519

The CVE-2004-2519 entry concerns Gattaca Server 2003 version 1.1.10.0. The vulnerability is a denial-of-service condition caused by how the LANGUAGE parameter handles directory specifiers in index.tmpl and web.tmpl. Examples include using: /, , ., .., and lang//en, which can lead to CPU consumpti...

CVE-2004-2531

X.509 Certificate Signature Verification in Gnu transport layer security library GnuTLS 1.0.16 allows remote attackers to cause a denial of service CPU consumption via certificates containing long chains and signed with large RSA keys...

CVE-2004-2519

Gattaca Server 2003 1.1.10.0 allows remote attackers to cause a denial of service CPU consumption via directory specifiers in the LANGUAGE parameter to 1 index.tmpl and 2 web.tmpl, such as a slash "/", b backslash "", c dot ".",, d dot dot "..", and e internal slash "lang//en"...

CVE-2004-2495

The CVE-2004-2495 entry affects Ability Mail Server 1.18, specifically the Webmail, Admin, and SMTP services. The vulnerability allows remote attackers to trigger a denial-of-service via a large number of simultaneous connections, resulting in high CPU usage. The available documents confirm the i...

CVE-2004-2531

X.509 certificate verification in GnuTLS 1.0.16 can be exploited by sending RSA certificates with very large modulus/exponent values to cause resource exhaustion and a denial of service. The CERT advisory notes cross‑vendor impact and that patches/updates have been released by vendors; apply the ...

CVE-2005-2912

CVE-2005-2912 affects Linksys WRT54G Wireless Router. The vulnerability is a denial-of-service condition caused by sending an HTTP POST request with a negative Content-Length, leading to CPU consumption and the web server hanging. Devices running affected firmware are prone to this DoS. The provi...