CVE-2007-3112

graphimage.php in Cacti 0.8.6i, and possibly other versions, allows remote authenticated users to cause a denial of service CPU consumption via a large value of the 1 graphstart or 2 graphend parameter, different vectors than CVE-2007-3113...

CVE-2007-3113

Cacti 0.8.6i, and possibly other versions, allows remote authenticated users to cause a denial of service CPU consumption via a large value of the 1 graphheight or 2 graphwidth parameter, different vectors than CVE-2007-3112...

CVE-2007-3112

graphimage.php in Cacti 0.8.6i, and possibly other versions, allows remote authenticated users to cause a denial of service CPU consumption via a large value of the 1 graphstart or 2 graphend parameter, different vectors than CVE-2007-3113...

CVE-2007-3113

CVE-2007-3113 affects Cacti 0.8.6i and possibly related builds. The issue is a denial-of-service caused by remote authenticated users sending excessively large graph_height or graph_width values, consuming CPU. Public details in connected sources describe the cause as insufficient input handling ...

CVE-2007-3112

CVE-2007-3112 affects Cacti 0.8.6i and possibly other versions, where remote authenticated users can cause CPU-based denial of service by sending large values for graph_start or graph_end in graph_image.php (different vectors than CVE-2007-3113). The issue relates to input handling in graph rende...

Mandrake Linux Security Advisory : file (MDKSA-2007:114)

The update to correct CVE-2007-1536 MDKSA-2007:067, a buffer overflow in the fileprintf function, introduced a new integer overflow as reported by Colin Percival. This flaw, if an attacker could trick a user into running file on a specially crafted file, could possibly lead to the execution of...

CVE-2007-2869

The form autocomplete feature in Mozilla Firefox 1.5.x before 1.5.0.12, 2.x before 2.0.0.4, and possibly earlier versions, allows remote attackers to cause a denial of service persistent temporary CPU consumption via a large number of characters in a submitted form...

CVE-2007-2869

The form autocomplete feature in Mozilla Firefox 1.5.x before 1.5.0.12, 2.x before 2.0.0.4, and possibly earlier versions, allows remote attackers to cause a denial of service persistent temporary CPU consumption via a large number of characters in a submitted form...

Race condition

Race condition in the Symantec Enterprise Security Manager ESM 6.5.3 managers and agents on Windows before 20070524 allows remote attackers to cause a denial of service CPU consumption and application hang via certain network scans to ESM ports...

CVE-2007-2884

Multiple stack-based buffer overflows in Microsoft Visual Basic 6 allow user-assisted remote attackers to cause a denial of service CPU consumption or execute arbitrary code via a Visual Basic Project vbp file with a long 1 Description or 2 Company Name VersionCompanyName field...

CVE-2007-2896

Race condition in the Symantec Enterprise Security Manager ESM 6.5.3 managers and agents on Windows before 20070524 allows remote attackers to cause a denial of service CPU consumption and application hang via certain network scans to ESM ports...

CVE-2007-2896

CVE-2007-2896 affects Symantec Enterprise Security Manager (ESM) 6.5.3 on Windows prior to 20070524. The issue is a race condition that allows remote attackers to cause denial of service via certain network scans directed at ESM ports, leading to CPU consumption and application hang. Descriptions...

CVE-2007-2884

Multiple stack-based buffer overflows in Microsoft Visual Basic 6 allow user-assisted remote attackers to cause a denial of service CPU consumption or execute arbitrary code via a Visual Basic Project vbp file with a long 1 Description or 2 Company Name VersionCompanyName field...

CVE-2007-2756

The gdPngReadData function in libgd 2.0.34 allows user-assisted attackers to cause a denial of service CPU consumption via a crafted PNG image with truncated data, which causes an infinite loop in the pngreadinfo function in libpng...

Code injection

The gdPngReadData function in libgd 2.0.34 allows user-assisted attackers to cause a denial of service CPU consumption via a crafted PNG image with truncated data, which causes an infinite loop in the pngreadinfo function in libpng...

CVE-2007-2756

The gdPngReadData function in libgd 2.0.34 allows user-assisted attackers to cause a denial of service CPU consumption via a crafted PNG image with truncated data, which causes an infinite loop in the pngreadinfo function in libpng...

CVE-2007-2756

The CVE-2007-2756 issue affects the GD library (libgd) with version 2.0.34, where gdPngReadData can enter an infinite loop in png_read_info when processing a crafted PNG with truncated data. This leads to CPU exhaustion (DoS) and is described as user-assisted. Demonstrated vulnerability context c...

CVE-2007-2756

The gdPngReadData function in libgd 2.0.34 allows user-assisted attackers to cause a denial of service CPU consumption via a crafted PNG image with truncated data, which causes an infinite loop in the pngreadinfo function in libpng...

CVE-2007-2756

The gdPngReadData function in libgd 2.0.34 allows user-assisted attackers to cause a denial of service CPU consumption via a crafted PNG image with truncated data, which causes an infinite loop in the pngreadinfo function in libpng...

CVE-2007-1869

CVE-2007-1869 affects lighttpd 1.4.12 and 1.4.13, where a remote attacker can cause denial of service by disconnecting while the server parses CRLF sequences, triggering an infinite loop and excessive file descriptor/resource consumption. The impact is a network-exposed DoS with CPU and memory/re...