CVE-2009-2539

The CVE-2009-2539 entry describes a denial-of-service via a large length value on the length property of a Select object in the Aigo P8860, related to CVE-2009-1692 in WebKit. Connected advisories (e.g., Debian DSA-1950, Mandriva MDVSA-2010:027/028, openSUSE/SUSE Nessus entries) confirm that WebK...

Mozilla Firefox / Microsoft Internet Explorer / Opera /Google Chrome DoS

Hang on circle with large radius value in SVG tags. Hang and memory leak on reload with keygen tag...

CVE-2009-2029

Unspecified vulnerability in rpc.nisd in Sun Solaris 8 through 10, and OpenSolaris before snv104, allows remote authenticated users to cause a denial of service NIS+ daemon hang via unspecified vectors related to NIS+ callbacks...

CVE-2009-1828

Mozilla Firefox 3.0.10 allows remote attackers to cause a denial of service infinite loop, application hang, and memory consumption via a KEYGEN element in conjunction with 1 a META element specifying automatic page refresh or 2 a JavaScript onLoad event handler for a BODY element. NOTE: it was...

Code injection

Mozilla Firefox 3.0.10 allows remote attackers to cause a denial of service infinite loop, application hang, and memory consumption via a KEYGEN element in conjunction with 1 a META element specifying automatic page refresh or 2 a JavaScript onLoad event handler for a BODY element. NOTE: it was...

CVE-2009-1827

The SVG component in Mozilla Firefox 3.0.4 allows remote attackers to cause a denial of service application hang via a large value in the r aka Radius attribute of a circle element, related to an "unclamped loop."...

OpenJDK remote LDAP Denial-Of-Service (6717680)

LdapCtx in the LDAP service in Java SE Development Kit JDK and Java Runtime Environment JRE 5.0 Update 17 and earlier; 6 Update 12 and earlier; SDK and JRE 1.3.124 and earlier; and 1.4.219 and earlier does not close the connection when initialization fails, which allows remote attackers to cause ...

Debian DSA-1800-1 : linux-2.6 - denial of service/privilege escalation/sensitive memory leak

Several vulnerabilities have been discovered in the Linux kernel that may lead to a denial of service, privilege escalation or a sensitive memory leak. The Common Vulnerabilities and Exposures project identifies the following problems : - CVE-2009-0028 Chris Evans discovered a situation in which ...

DSA-1790-1 xpdf - multiple vulnerabilities

Bulletin has no description...

Mandriva Linux Security Advisory : kernel (MDVSA-2008:234)

Some vulnerabilities were discovered and corrected in the Linux 2.6 kernel : Buffer overflow in the hfsplusfindcat function in fs/hfsplus/catalog.c in the Linux kernel before 2.6.28-rc1 allows attackers to cause a denial of service memory corruption or system crash via an hfsplus filesystem image...

Ubuntu 8.10 : linux vulnerability (USN-662-1)

It was discovered that the Linux kernel could be made to hang temporarily when mounting corrupted ext2/3 filesystems. If a user were tricked into mounting a specially crafted filesystem, a remote attacker could cause system hangs, leading to a denial of service. CVE-2008-3528 Anders Kaseorg...

CentOS 4 : kernel (CESA-2007:0014)

Updated kernel packages that fix several security issues in the Red Hat Enterprise Linux 4 kernel are now available. This security advisory has been rated as having important security impact by the Red Hat Security Response Team. The Linux kernel handles the basic functions of the operating syste...

Microsoft Internet Explorer DoS

Browser hangs while trying to determine charset of the text document with large number of random characters...

Mandriva Update for kdegraphics MDVA-2008:079 (kdegraphics)

Check for the Version of kdegraphics OpenVAS Vulnerability Test Mandriva Update for kdegraphics MDVA-2008:079 kdegraphics Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

Mandriva Update for tripwire MDKA-2007:011 (tripwire)

Check for the Version of tripwire OpenVAS Vulnerability Test Mandriva Update for tripwire MDKA-2007:011 tripwire Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for console-tools MDKA-2007:077 (console-tools)

Check for the Version of console-tools OpenVAS Vulnerability Test Mandriva Update for console-tools MDKA-2007:077 console-tools Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/...

Mandriva Update for tripwire MDKA-2007:011 (tripwire)

Check for the Version of tripwire OpenVAS Vulnerability Test Mandriva Update for tripwire MDKA-2007:011 tripwire Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or modify it...

Mandriva Update for kdegraphics MDVA-2008:079 (kdegraphics)

Check for the Version of kdegraphics OpenVAS Vulnerability Test Mandriva Update for kdegraphics MDVA-2008:079 kdegraphics Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH, http://www.greenbone.net This program is free software; you can redistribute it and/or...

CVE-2009-1270

libclamav/untar.c in ClamAV before 0.95 allows remote attackers to cause a denial of service infinite loop via a crafted TAR file that causes 1 clamd and 2 clamscan to hang...

OpenJDK remote LDAP Denial-Of-Service (6717680)

LdapCtx in the LDAP service in Java SE Development Kit JDK and Java Runtime Environment JRE 5.0 Update 17 and earlier; 6 Update 12 and earlier; SDK and JRE 1.3.124 and earlier; and 1.4.219 and earlier does not close the connection when initialization fails, which allows remote attackers to cause ...