CVE-2009-2536

CVE-2009-2536: Microsoft Internet Explorer 5–8 remote DoS via a large length value on a Select element, causing memory consumption and application crash. Root cause is tied to the length property handling in a Select object (related CVE-2009-1692). The provided documents identify the issue and it...

CVE-2009-2538

Technical details for CVE-2009-2538 are not provided in the supplied documents. Connected items reference other WebKit-related CVEs but do not expose product/version/root-cause or remediation for CVE-2009-2538. Monitor for updates.

CVE-2009-2535

CVE-2009-2535 affects Mozilla Firefox before 2.0.0.19 and 3.x before 3.0.5, SeaMonkey, and Thunderbird, enabling remote attackers to trigger memory consumption and a crash (DoS) by supplying a large integer as the length property of a Select element. Root cause and exploit details are not expande...

CVE-2009-2535

Mozilla Firefox before 2.0.0.19 and 3.x before 3.0.5, SeaMonkey, and Thunderbird allow remote attackers to cause a denial of service memory consumption and application crash via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692...

CVE-2009-2540

CVE-2009-2540 concerns Opera Web Browser (likely 9.64 and earlier) where a crafted HTML Select element with a large length value can trigger memory consumption, causing a denial of service. This is described as a related issue to CVE-2009-1692. Connected sources (OpenVAS entries) validate the ass...

CVE-2009-2539

The CVE-2009-2539 entry describes a denial-of-service via a large length value on the length property of a Select object in the Aigo P8860, related to CVE-2009-1692 in WebKit. Connected advisories (e.g., Debian DSA-1950, Mandriva MDVSA-2010:027/028, openSUSE/SUSE Nessus entries) confirm that WebK...

CVE-2009-2539

The Aigo P8860 allows remote attackers to cause a denial of service memory consumption and browser hang via a large integer value for the length property of a Select object, a related issue to CVE-2009-1692...

CVE-2009-2542

Technical details for CVE-2009-2542 are not provided in the connected documents. The initial description mentions a memory-denial DoS in Netscape's Select length property; no product/version or fix details are included here. Monitor for updates.

CVE-2009-2537

CVE-2009-2537 describes a denial of service in KDE Konqueror caused by processing a very large integer for the length property of a Select element. The issue is tied to the WebKit/KHTML stack used by Konqueror and results in memory exhaustion on remote providers. Connected advisories (e.g., Mandr...

PT-2009-4942 · Opera · Opera

Name of the Vulnerable Software and Affected Versions: Opera versions 9.64 and earlier Description: The issue allows remote attackers to cause a denial of service, specifically memory consumption, by setting a large integer value for the length property of a Select object. Recommendations: For...

JetAudio 7.5.3 COWON Media Center - .wav Crash

JetAudio 7.5.3 COWON Media Center - .wav Crash !/usr/bin/perl -w JetAudio 7.5.3 COWON Media Center.WAV file Memory Comsumption DoS Exploit Founded and exploited by prodigy Vendor: JetAudio Usage to reproduce the bug: you need a file of recorded music in .wav,and then open it with JetAudio and...

JetAudio 7.5.3 COWON Media Center (.wav File) Crash Exploit

No description provided by source. !/usr/bin/perl -w JetAudio 7.5.3 COWON Media Center.WAV file Memory Comsumption DoS Exploit Founded and exploited by prodigy Vendor: JetAudio Usage to reproduce the bug: you need a file of recorded music in .wav,and then open it with JetAudio and booom! Platform...

JetAudio 7.5.3 COWON Media Center - '.wav' Crash

!/usr/bin/perl -w JetAudio 7.5.3 COWON Media Center.WAV file Memory Comsumption DoS Exploit Founded and exploited by prodigy Vendor: JetAudio Usage to reproduce the bug: you need a file of recorded music in .wav,and then open it with JetAudio and booom! Platform: Windows ==PoC== use strict; use...

JetAudio 7.5.3 Crash Exploit

!/usr/bin/perl -w JetAudio 7.5.3 COWON Media Center.WAV file Memory Comsumption DoS Exploit Founded and exploited by prodigy Vendor: JetAudio Usage to reproduce the bug: you need a file of recorded music in .wav,and then open it with JetAudio and booom! Platform: Windows ==PoC== use strict; use...

JetAudio 7.5.3 COWON Media Center (.wav File) Crash Exploit

Exploit for windows platform in category remote exploits =========================================================== JetAudio 7.5.3 COWON Media Center .wav File Crash Exploit =========================================================== !/usr/bin/perl -w JetAudio 7.5.3 COWON Media Center.WAV file...

CVE-2009-2299

The Artofdefence Hyperguard Web Application Firewall WAF module before 2.5.5-11635, 3.0 before 3.0.3-11636, and 3.1 before 3.1.1-11637, a module for the Apache HTTP Server, allows remote attackers to cause a denial of service memory consumption via an HTTP request with a large Content-Length valu...

CVE-2009-2299

The CVE-2009-2299 entry concerns the Artofdefence Hyperguard WAF module for Apache. Affected versions include 2.5.5-11635 and earlier 3.0.3-11636 and 3.1.1-11637, where a remote attacker can cause a denial of service via an HTTP request that specifies a large Content-Length value but provides no ...

Ubuntu USN-792-1 (openssl)

The remote host is missing an update to openssl announced via advisory USN-792-1. OpenVAS Vulnerability Test $Id: ubuntu7921.nasl 7969 2017-12-01 09:23:16Z santu $ $Id: ubuntu7921.nasl 7969 2017-12-01 09:23:16Z santu $ Description: Auto-generated from advisory USN-792-1 openssl Authors: Thomas...

USN-792-1: OpenSSL vulnerabilities

It was discovered that OpenSSL did not limit the number of DTLS records it would buffer when they arrived with a future epoch. A remote attacker could cause a denial of service via memory resource consumption by sending a large number of crafted requests. CVE-2009-1377 It was discovered that...

Memory corruption

Memory leak on the Cisco Physical Access Gateway with software before 1.1 allows remote attackers to cause a denial of service memory consumption via unspecified TCP packets...