Information disclosure

Guidance Software EnCase 5.0 allows user-assisted remote attackers to cause a denial of service stack memory consumption and possibly have other unspecified impact via a malformed file, related to "EnCase's file system parsing." NOTE: this information is based upon a vague pre-advisory. It might...

CVE-2007-4194

Guidance Software EnCase 5.0 allows user-assisted remote attackers to cause a denial of service stack memory consumption and possibly have other unspecified impact via a malformed file, related to "EnCase's file system parsing." NOTE: this information is based upon a vague pre-advisory. It might...

CVE-2007-4194

CVE-2007-4194 concerns Guidance Software EnCase 5.0 and describes user‑assisted remote denial of service via a malformed file, related to EnCase’s file system parsing. The core weakness centers on how EnCase parses certain inputs, potentially causing stack memory consumption and unspecified impac...

CVE-2007-4158

The CVE-2007-4158 entry describes a memory leak in TIBCO Rendezvous (RV) daemon (rvd) affecting 7.5.2, 7.5.3, and 7.5.4. A remote attacker can trigger a denial of service (memory consumption) by sending a crafted packet with a length field of zero, leading to improper memory allocation. This is t...

CVE-2007-3513

The lcdwrite function in drivers/usb/misc/usblcd.c in the Linux kernel before 2.6.22-rc7 does not limit the amount of memory used by a caller, which allows local users to cause a denial of service memory consumption...

Memory corruption

The lcdwrite function in drivers/usb/misc/usblcd.c in the Linux kernel before 2.6.22-rc7 does not limit the amount of memory used by a caller, which allows local users to cause a denial of service memory consumption...

CVE-2007-3513

The lcdwrite function in drivers/usb/misc/usblcd.c in the Linux kernel before 2.6.22-rc7 does not limit the amount of memory used by a caller, which allows local users to cause a denial of service memory consumption...

CVE-2007-3513

CVE-2007-3513 : In the Linux kernel, the lcd_write function in drivers/usb/misc/usblcd.c does not limit memory used by a caller, allowing a local user to exhaust memory and cause a denial of service. Affected until 2.6.22-rc7; remediation is upgrading to 2.6.22-rc7 or later where the issue is fix...

Design/Logic Flaw

Wireshark 0.99.5 allows remote attackers to cause a denial of service memory consumption via a malformed DCP ETSI packet that triggers an infinite loop...

CVE-2007-3391

Wireshark 0.99.5 allows remote attackers to cause a denial of service memory consumption via a malformed DCP ETSI packet that triggers an infinite loop...

CVE-2007-3391

Wireshark 0.99.5 allows remote attackers to cause a denial of service memory consumption via a malformed DCP ETSI packet that triggers an infinite loop...

CVE-2007-3391

Wireshark 0.99.5 is affected by CVE-2007-3391 due to a malformed DCP ETSI packet that can trigger an infinite loop, causing memory exhaustion (denial of service). The issue is addressed in later Wireshark releases (e.g., upgrade to 0.99.6 and later fixes noted in advisories). Affected platforms i...

CVE-2007-3391

Wireshark 0.99.5 allows remote attackers to cause a denial of service memory consumption via a malformed DCP ETSI packet that triggers an infinite loop...

Memory corruption

Memory leak in server/MaraDNS.c in MaraDNS before 1.2.12.05, and 1.3.x before 1.3.03, allows remote attackers to cause a denial of service memory consumption via unspecified vectors, a different set of affected versions than CVE-2007-3115 and CVE-2007-3116...

Design/Logic Flaw

Multiple memory leaks in server/MaraDNS.c in MaraDNS before 1.2.12.06, and 1.3.x before 1.3.05, allow remote attackers to cause a denial of service memory consumption via 1 reverse lookups or 2 requests for records in a class other than Internet IN, a different set of affected versions than...

DEBIAN-CVE-2007-3114

Memory leak in server/MaraDNS.c in MaraDNS before 1.2.12.05, and 1.3.x before 1.3.03, allows remote attackers to cause a denial of service memory consumption via unspecified vectors, a different set of affected versions than CVE-2007-3115 and CVE-2007-3116...

Design/Logic Flaw

The administrative service in Symantec Veritas Volume Replicator VVR for Windows 3.1 through 4.3, and VVR for Unix 3.5 through 5.0, in Symantec Storage Foundation products allows remote attackers to cause a denial of service memory consumption and service crash via a crafted packet to the service...

CVE-2007-1593

The administrative service in Symantec Veritas Volume Replicator VVR for Windows 3.1 through 4.3, and VVR for Unix 3.5 through 5.0, in Symantec Storage Foundation products allows remote attackers to cause a denial of service memory consumption and service crash via a crafted packet to the service...

CVE-2007-1593

CVE-2007-1593 affects Symantec Veritas Storage Foundation: the Administration Service (TCP/8199) on Windows 4.3 and Unix 5.0 (VVR/Storage Foundation) is vulnerable to remote DoS. A crafted packet triggers excessive memory allocation and writes to an invalid pointer, crashing the service. Exploita...

Path traversal

Mozilla Firefox 1.5.x before 1.5.0.12 and 2.x before 2.0.0.4, and SeaMonkey 1.0.9 and 1.1.2, allows remote attackers to cause a denial of service via 1 a large cookie path parameter, which triggers memory consumption, or 2 an internal delimiter within cookie path or name values, which could trigg...