CVE-2006-0040

CVE-2006-0040 affects GNOME Evolution 2.4.2.1 and earlier. A remote attacker can trigger a denial of service by sending a text email containing a very large number of URLs, leading to increased CPU and memory usage. The root cause is noted as potentially related to gtkhtml, but the exact flaw is ...

CVE-2006-0040

GNOME Evolution 2.4.2.1 and earlier allows remote attackers to cause a denial of service CPU and memory consumption via a text e-mail with a large number of URLs, possibly due to unknown problems in gtkhtml...

CVE-2006-0040

GNOME Evolution 2.4.2.1 and earlier allows remote attackers to cause a denial of service CPU and memory consumption via a text e-mail with a large number of URLs, possibly due to unknown problems in gtkhtml...

CVE-2006-1091

Kaspersky Antivirus 5.0.5 and 5.5.3 allows remote attackers to cause a denial of service CPU and memory consumption via unknown attack vectors...

CVE-2006-1046

server.cpp in Monopd 0.9.3 allows remote attackers to cause a denial of service CPU and memory consumption via a string containing a large number of characters that are escaped when Monopd produces XML output...

Design/Logic Flaw

server.cpp in Monopd 0.9.3 allows remote attackers to cause a denial of service CPU and memory consumption via a string containing a large number of characters that are escaped when Monopd produces XML output...

CVE-2006-1046

server.cpp in Monopd 0.9.3 allows remote attackers to cause a denial of service CPU and memory consumption via a string containing a large number of characters that are escaped when Monopd produces XML output...

Code injection

Multiple memory leaks in the LDAP component in Fedora Directory Server 1.0 allow remote attackers to cause a denial of service memory consumption via invalid BER packets that trigger an error, which might prevent memory from being freed if it was allocated during the berscanf call, as demonstrate...

CVE-2006-0451

Multiple memory leaks in the LDAP component in Fedora Directory Server 1.0 allow remote attackers to cause a denial of service memory consumption via invalid BER packets that trigger an error, which might prevent memory from being freed if it was allocated during the berscanf call, as demonstrate...

CVE-2006-0368

CVE-2006-0368 affects Cisco CallManager versions 3.2 and earlier; 3.3 before 3.3(5)SR1; 4.0 before 4.0(2a)SR2c; and 4.1 before 4.1(3)SR2. It enables remote attackers to cause denial of service by opening a large number of TCP connections to port 2000 (CPU/memory consumption) and to ports 2001, 20...

CVE-2005-4504

The khtml::RenderTableSection::ensureRows function in KHTMLParser in Apple Mac OS X 10.4.3 and earlier, as used by Safari and TextEdit, allows remote attackers to cause a denial of service memory consumption and application crash via HTML files with a large ROWSPAN attribute in a TD tag...

CVE-2005-4504

The khtml::RenderTableSection::ensureRows function in KHTMLParser in Apple Mac OS X 10.4.3 and earlier, as used by Safari and TextEdit, allows remote attackers to cause a denial of service memory consumption and application crash via HTML files with a large ROWSPAN attribute in a TD tag...

CVE-2005-4504

The vulnerability CVE-2005-4504 affects Apple Mac OS X (10.4.3 and earlier) in the khtml::RenderTableSection::ensureRows function within KHTMLParser used by Safari and TextEdit. A remote attacker can trigger a denial of service (memory consumption and application crash) by parsing HTML files cont...

CVE-2004-2650

The CVE-2004-2650 entry concerns the Apache James spooler. Affected component: James 2.2.0 spooler retrieve function. Root cause: triggering various error conditions in the retrieve function can prevent a lock release, causing a memory leak and resulting in local-denial-of-service impact. The ava...

MDKSA-2005:219 - Updated kernel packages fix numerous vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2005:219 http://www.mandriva.com/security/ Package : kernel Date : November 30, 2005 Affected: 10.1 Problem Description: Multiple vulnerabilities in the Linux 2.6 kernel have been discovered and corrected in this...

MDKSA-2005:218 - Updated kernel packages fix numerous vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2005:218 http://www.mandriva.com/security/ Package : kernel Date : November 30, 2005 Affected: Corporate 3.0, Multi Network Firewall 2.0 Problem Description: Multiple vulnerabilities in the Linux 2.6 kernel have...

CVE-2005-3899

CVE-2005-3899 concerns Google Talk’s automatic update mechanism. The vulnerability allows remote attackers to trigger a denial of service by poisoning a target’s DNS cache and forcing a large update file to be processed, which consumes CPU and memory during signature verification. The provided do...

Linux Kernel 2.6.x - Time_Out_Leases PrintK Local Denial of Service

/ source: https://www.securityfocus.com/bid/15627/info Linux kernel is susceptible to a local denial-of-service vulnerability. Local attackers may trigger this issue by obtaining numerous file-lock leases, which will consume excessive kernel log memory. Once the leases timeout, the event will be...

CVE-2005-3848

Memory leak in the icmppushreply function in Linux 2.6 before 2.6.12.6 and 2.6.13 allows remote attackers to cause a denial of service memory consumption via a large number of crafted packets that cause the ipappenddata function to fail, aka "DST leak in icmppushreply."...

CVE-2005-3644

PNPGetDeviceList upnpgetdevicelist in UPnP for Microsoft Windows 2000 SP4 and earlier, and possibly Windows XP SP1 and earlier, allows remote attackers to cause a denial of service memory consumption via a DCE RPC request that specifies a large output buffer size, a variant of CVE-2006-6296, and ...