CVE-2009-2578

Google Chrome 2.x through 2.0.172 allows remote attackers to cause a denial of service application crash via a long Unicode string argument to the write method, a related issue to CVE-2009-2479...

CVE-2009-2576

CVE-2009-2576 refers to a Denial of Service in Microsoft Internet Explorer (IE) where a long Unicode string passed to the write method can consume CPU/memory. The OpenVAS entry OpenVAS:900400 explicitly links CVE-2009-2576 to IE Unicode String DoS and lists a base CVSS v2 score of 5.0 (AV:N/AC:L/...

CVE-2009-2578

Removed by vendor...

CVE-2009-2576: Undefined Security Weakness

Microsoft Internet Explorer 6.0.2900.2180 and earlier allows remote attackers to cause a denial of service CPU and memory consumption via a long Unicode string argument to the write method, a related issue to CVE-2009-2479. NOTE: it was later reported that 7.0.6000.16473 and earlier are also...

CVE-2009-2578: Improper Restriction of Operations within the Bounds of a Memory Buffer

Google Chrome 2.x through 2.0.172 allows remote attackers to cause a denial of service application crash via a long Unicode string argument to the write method, a related issue to CVE-2009-2479...

CVE-2009-2577: Undefined Security Weakness

Opera 9.52 and earlier allows remote attackers to cause a denial of service CPU and memory consumption, and application hang via a long Unicode string argument to the write method, a related issue to CVE-2009-2479...

Multiple browsers DoS

Crash or resources exhaustion on oversized unicode string operations via Javascript...

CVE-2009-2479

Mozilla Firefox 3.0.x, 3.5, and 3.5.1 on Windows allows remote attackers to cause a denial of service uncaught exception and application crash via a long Unicode string argument to the write method. NOTE: this was originally reported as a stack-based buffer overflow. NOTE: on Linux and Mac OS X, ...

CVE-2009-2479

Mozilla Firefox 3.0.x, 3.5, and 3.5.1 on Windows allows remote attackers to cause a denial of service uncaught exception and application crash via a long Unicode string argument to the write method. NOTE: this was originally reported as a stack-based buffer overflow. NOTE: on Linux and Mac OS X, ...

CVE-2009-2479: Improper Restriction of Operations within the Bounds of a Memory Buffer

Mozilla Firefox 3.0.x, 3.5, and 3.5.1 on Windows allows remote attackers to cause a denial of service uncaught exception and application crash via a long Unicode string argument to the write method. NOTE: this was originally reported as a stack-based buffer overflow. NOTE: on Linux and Mac OS X, ...

Buffer overflow

Multiple buffer overflows in the cifs subsystem in the Linux kernel before 2.6.29.4 allow remote CIFS servers to cause a denial of service memory corruption and possibly have unspecified other impact via 1 a malformed Unicode string, related to Unicode string area alignment in fs/cifs/sess.c; or ...

CVE-2009-1633

Multiple buffer overflows in the cifs subsystem in the Linux kernel before 2.6.29.4 allow remote CIFS servers to cause a denial of service memory corruption and possibly have unspecified other impact via 1 a malformed Unicode string, related to Unicode string area alignment in fs/cifs/sess.c; or ...

CVE-2009-1633

The CVE-2009-1633 issue affects the Linux kernel CIFS subsystem prior to 2.6.29.4. It describes multiple buffer overflows in CIFS that can be triggered by a malformed Unicode string (Unicode string area alignment in fs/cifs/sess.c) or long Unicode characters (fs/cifs/cifssmb.c and fs/cifs/readdir...

Heap overflow

Heap-based buffer overflow in CoreText in Apple Mac OS X 10.5.6 allows remote attackers to execute arbitrary code via a crafted Unicode string...

CVE-2009-0012

Heap-based buffer overflow in CoreText in Apple Mac OS X 10.5.6 allows remote attackers to execute arbitrary code via a crafted Unicode string...

CVE-2009-0012

CVE-2009-0012: Heap-based buffer overflow in CoreText on Apple Mac OS X 10.5.6 can allow remote code execution via a crafted Unicode string. The NVD entry documents the vulnerability and its impact (remote code execution, integrity/confidentiality/availability complete). Affected product: Mac OS ...

CVE-2009-0012: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in CoreText in Apple Mac OS X 10.5.6 allows remote attackers to execute arbitrary code via a crafted Unicode string...

Hex Workshop v6 (ColorMap files .cmap) Invalid Memory Reference PoC

Exploit for unknown platform in category dos / poc =================================================================== Hex Workshop v6 ColorMap files .cmap Invalid Memory Reference PoC =================================================================== !/usr/bin/perl -w Hex Workshop v6 "ColorMap...

Python多个整数溢出漏洞

BUGTRAQ ID: 30491 CVECAN ID: CVE-2008-2315,CVE-2008-2316,CVE-2008-3142,CVE-2008-3143,CVE-2008-3144 Python是一种开放源代码的脚本编程语言。 Python中存在多个整数溢出漏洞，可能允许恶意用户导致拒绝服务或入侵有漏洞的系统。 1 stringobject、unicodeobject、bufferobject、longobject、tupleobject、stropmodule、gcmodule、mmapmodule等核心模块中存在各种整数溢出。 2...

CVE-2008-3142

Multiple buffer overflows in Python 2.5.2 and earlier on 32bit platforms allow context-dependent attackers to cause a denial of service crash or have unspecified other impact via a long string that leads to incorrect memory allocation during Unicode string processing, related to the unicoderesize...