CVE-2006-7205

The arrayfill function in ext/standard/array.c in PHP 4.4.2 and 5.1.2 allows context-dependent attackers to cause a denial of service memory consumption via a large num value...

Memory corruption

Memory leak in the PPP over Ethernet PPPoE socket implementation in the Linux kernel before 2.6.21-git8 allows local users to cause a denial of service memory consumption by creating a socket using connect, and releasing it before the PPPIOCGCHAN ioctl is initialized...

Memory corruption

RealNetworks RealPlayer 10 Gold allows remote attackers to cause a denial of service memory consumption via a certain .ra file. NOTE: this issue was referred to as a "memory leak," but it is not clear if this is correct...

CVE-2007-2497

RealNetworks RealPlayer 10 Gold is vulnerable to a remote denial of service caused by processing a crafted .ra file that leads to memory consumption. The description notes this as a potential “memory leak” but does not provide root-cause details or a confirmed fix. Public references in the CVE en...

Design/Logic Flaw

The DHCP relay agent in Cisco Adaptive Security Appliance ASA and PIX 7.2 allows remote attackers to cause a denial of service dropped packets via a DHCPREQUEST or DHCPINFORM message that causes multiple DHCPACK messages to be sent from DHCP servers to the agent, which consumes the memory allocat...

CVE-2007-2461

The DHCP relay agent in Cisco Adaptive Security Appliance ASA and PIX 7.2 allows remote attackers to cause a denial of service dropped packets via a DHCPREQUEST or DHCPINFORM message that causes multiple DHCPACK messages to be sent from DHCP servers to the agent, which consumes the memory allocat...

CVE-2006-7051

The systimercreate function in posix-timers.c for Linux kernel 2.6.x allows local users to cause a denial of service memory consumption and possibly bypass memory limits or cause other processes to be killed by creating a large number of posix timers, which are allocated in kernel memory but are...

CVE-2006-7051

The systimercreate function in posix-timers.c for Linux kernel 2.6.x allows local users to cause a denial of service memory consumption and possibly bypass memory limits or cause other processes to be killed by creating a large number of posix timers, which are allocated in kernel memory but are...

CVE-2006-7051

The CVE-2006-7051 vulnerability concerns the Linux kernel 2.6.x, specifically the sys_timer_create function in posix-timers.c. Local users can create a large number of posix timers, which are allocated in kernel memory but not counted as part of the process’s memory, leading to memory exhaustion ...

CVE-2006-7051

The systimercreate function in posix-timers.c for Linux kernel 2.6.x allows local users to cause a denial of service memory consumption and possibly bypass memory limits or cause other processes to be killed by creating a large number of posix timers, which are allocated in kernel memory but are...

Mandrake Linux Security Advisory : gv (MDKSA-2006:214-1)

Stack-based buffer overflow in the psgettext function in ps.c for GNU gv 3.6.2, and possibly earlier versions, allows user-assisted attackers to execute arbitrary code via a PostScript PS file with certain headers that contain long comments, as demonstrated using the DocumentMedia header. Package...

CVE-2007-0048

Adobe Acrobat Reader Plugin before 8.0.0, and possibly the plugin distributed with Adobe Reader 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2, when used with Internet Explorer, Google Chrome, or Opera, allows remote attackers to cause a denial of service memory consumption via a long...

Cross site scripting

Adobe Acrobat Reader Plugin before 8.0.0, and possibly the plugin distributed with Adobe Reader 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2, when used with Internet Explorer, Google Chrome, or Opera, allows remote attackers to cause a denial of service memory consumption via a long...

CVE-2007-0048

Adobe Acrobat Reader Plugin before 8.0.0, and possibly the plugin distributed with Adobe Reader 7.x before 7.1.4, 8.x before 8.1.7, and 9.x before 9.2, when used with Internet Explorer, Google Chrome, or Opera, allows remote attackers to cause a denial of service memory consumption via a long...

CVE-2006-6723

The Workstation service in Microsoft Windows 2000 SP4 and XP SP2 allows remote attackers to cause a denial of service memory consumption via a large maxlen value in an NetrWkstaUserEnum RPC request...

CVE-2006-6723

The Workstation service in Microsoft Windows 2000 SP4 and XP SP2 allows remote attackers to cause a denial of service memory consumption via a large maxlen value in an NetrWkstaUserEnum RPC request...

CVE-2006-6723

The CVE-2006-6723 issue affects the Workstation service in Microsoft Windows 2000 SP4 and Windows XP SP2, where a crafted NetrWkstaUserEnum RPC request with a large maxlen value can cause a denial of service through memory consumption. The root cause is tied to how the Workstation service process...

CVE-2006-6296

The CVE-2006-6296 issue affects the Windows Print Spooler (SPOOLSS) via the RpcGetPrinterData function in spoolsv.exe. A remote attacker can trigger a denial of service by sending a crafted RPC request with a large output buffer size, causing memory consumption on affected systems. Affected produ...

security flaw

epan/dissectors/packet-xot.c in the XOT dissector dissectxotpdu in Wireshark formerly Ethereal 0.9.8 through 0.99.3 allows remote attackers to cause a denial of service memory consumption and crash via an encoded XOT packet that produces a zero length value when it is decoded...

CVE-2006-5708

Multiple unspecified vulnerabilities in MDaemon and WorldClient in Alt-N Technologies MDaemon before 9.50 allow attackers to cause a denial of service memory consumption via unspecified vectors resulting in memory leaks...