CVE-2007-6349

CVE-2007-6349 affects Perforce P4Web 2006.2 and earlier on Windows. The issue is a denial-of-service caused by a crafted HTTP request with a non-empty Content-Length but an empty body, which drives P4Webs.exe to consume up to high CPU usage remotely (no authentication required). The Symantec advi...

Opera 9.50 beta and prior remote DoS (freeze)

Name : Opera 9.50 beta / 9.24 Remote DoS Type : Remote DoS Credits: Gynvael Coldwind of Vexillium & Simey Impact : Low Short description Opera is vulnerable to a remote DoS attack, using spacially crafted BMP files, that causes the browser to freeze for a short amount of time around 4 minutes on...

Design/Logic Flaw

classes/Url.php in Justin Hagstrom AutoIndex PHP Script before 2.2.4 allows remote attackers to cause a denial of service CPU and memory consumption via a %00 sequence in the dir parameter to index.php, which triggers an erroneous "recursive calculation."...

Design/Logic Flaw

Mozilla Firefox 2.0.0.9 allows remote attackers to cause a denial of service CPU consumption and crash via an iframe with Javascript that sets the document.location to contain a leading NULL byte \x00 and a 1 res://, 2 about:config, or 3 file:/// URI...

CVE-2007-5896

Mozilla Firefox 2.0.0.9 allows remote attackers to cause a denial of service CPU consumption and crash via an iframe with Javascript that sets the document.location to contain a leading NULL byte \x00 and a 1 res://, 2 about:config, or 3 file:/// URI...

Design/Logic Flaw

The SNMP agent snmpagent.c in net-snmp before 5.4.1 allows remote attackers to cause a denial of service CPU and memory consumption via a GETBULK request with a large max-repeaters value...

net-snmp -- denial of service via GETBULK request

CVE reports: The SNMP agent snmpagent.c in net-snmp before 5.4.1 allows remote attackers to cause a denial of service CPU and memory consumption via a GETBULK request with a large max-repeaters value...

CVE-2002-2329

CVE-2002-2329 affects ICQ client versions 2001b, 2002a and 2002b. The vulnerability allows remote attackers to cause a denial of service (CPU consumption or crash) by sending a message containing a large number of emoticons. The connected Red Hat and CVE listing entries confirm the same impact. N...

CVE-2003-1518

CVE-2003-1518 affects Adiscon WinSyslog 4.21 SP1. A remote attacker can cause a denial of service by sending a long syslog message, leading to CPU consumption or the system freeze. Public sources describe the vulnerable component as WinSyslog’s handling of syslog input over the network (default p...

CVE-2003-1510

TinyWeb 1.9 is vulnerable to a remote denial-of-service triggered by a crafted HTTP GET request to /cgi-bin/.%00./... that consumes high CPU. Affected component is the web server’s CGI handling; root cause appears to be processing a peculiar path fragment in GET requests (".%%00."). Vendors and s...

CVE-2003-1518

Adiscon WinSyslog 4.21 SP1 allows remote attackers to cause a denial of service CPU consumption via a long syslog message...

GLSA-200710-27 : ImageMagick: Multiple vulnerabilities

The remote host is affected by the vulnerability described in GLSA-200710-27 ImageMagick: Multiple vulnerabilities regenrecht reported multiple infinite loops in functions ReadDCMImage and ReadXCFImage CVE-2007-4985, multiple integer overflows when handling certain types of images CVE-2007-4986,...

CVE-2003-1494

The CVE-2003-1494 issue affects HP OpenView Network Node Manager (NNM) versions 6.2 and 6.4. A remote attacker can cause a denial of service via a crafted TCP packet, resulting in CPU consumption. The available documents describe the vulnerability and impact but do not provide a remediation or pa...

CVE-2003-1477

MAILsweeper for SMTP 4.3.6 and 4.3.7 allows remote attackers to cause a denial of service CPU consumption via a PowerPoint attachment that either 1 is corrupt or 2 contains "embedded objects."...

CVE-2003-1477

CVE-2003-1477 affects MAILsweeper for SMTP versions 4.3.6 and 4.3.7. A remote attacker can trigger a DoS by sending a PowerPoint attachment that is corrupt or contains embedded objects, causing CPU exhaustion and making the server unresponsive. Documents confirm the vulnerable product and the DoS...

ImageMagick: Multiple vulnerabilities

Background ImageMagick is a collection of tools and libraries for manipulating various image formats. Description regenrecht reported multiple infinite loops in functions ReadDCMImage and ReadXCFImage CVE-2007-4985, multiple integer overflows when handling certain types of images CVE-2007-4986,...

CVE-2003-1444

Kaspersky Antivirus (KAV) 4.0.9.0 is vulnerable to a local-denial-of-service issue: a user can cause CPU exhaustion or crash and also prevent detection of malicious code by processing a file with an excessively long pathname. Affected product: KAV 4.0.9.0. Root cause described as an issue with ha...

CVE-2003-1444

Kaspersky Antivirus KAV 4.0.9.0 allows local users to cause a denial of service CPU consumption or crash and prevent malicious code from being detected via a file with a long pathname...

CVE-2003-1416

CVE-2003-1416 affects BisonFTP Server 4 release 2 . The vulnerability allows remote denial of service (CPU consumption) triggered by abnormally long commands: either a long ls or a long cwd. The CVSS data indicates a network attack vector with no authentication required and a partial impact on av...

CVE-2002-2306

The vulnerability CVE-2002-2306 affects Sharman Networks KaZaA Media Desktop 1.7.1. It allows remote attackers to cause a Denial of Service by sending several large messages, leading to CPU consumption on the affected host. The available documents identify the affected software and the impact (av...