CVE-2009-3276

CVE-2009-3276 affects Zoran/WinFormsAdvansed/RegeularDataToXML/Form1.cs in WinFormsAdvansed within NASD CORE.NET Terelik (aka corenet1). The vulnerability is a ReDoS: context-dependent attackers can cause CPU exhaustion by supplying an input string consisting of many alphabetic characters followe...

neon: billion laughs DoS attack

neon before 0.28.6, when expat is used, does not properly detect recursion during entity expansion, which allows context-dependent attackers to cause a denial of service memory and CPU consumption via a crafted XML document containing a large number of nested entity references, a similar issue to...

CVE-2009-3275: Use of Externally-Controlled Format String

Blocks/Common/Src/Configuration/Manageability/Adm/AdmContentBuilder.cs in Microsoft patterns & practices Enterprise Library aka EntLib allows context-dependent attackers to cause a denial of service CPU consumption via an input string composed of many \ backslash characters followed by a " double...

CVE-2009-3276: Undefined Security Weakness

Zoran/WinFormsAdvansed/RegeularDataToXML/Form1.cs in WinFormsAdvansed in NASD CORE.NET Terelik aka corenet1 allows context-dependent attackers to cause a denial of service CPU consumption via an input string composed of many alphabetic characters followed by a ! exclamation point, related to a...

Sql injection

Google Chrome 1.0.154.48 and earlier allows remote attackers to cause a denial of service CPU consumption via an automatically submitted form containing a KEYGEN element, a related issue to CVE-2009-1828...

Sql injection

Microsoft Internet Explorer 6 through 6.0.2900.2180, and 7.0.6000.16711, allows remote attackers to cause a denial of service CPU consumption via an automatically submitted form containing a KEYGEN element, a related issue to CVE-2009-1828...

CVE-2009-3268

Google Chrome 1.0.154.48 and earlier allows remote attackers to cause a denial of service CPU consumption via an automatically submitted form containing a KEYGEN element, a related issue to CVE-2009-1828...

CVE-2009-3267

Microsoft Internet Explorer 6 through 6.0.2900.2180, and 7.0.6000.16711, allows remote attackers to cause a denial of service CPU consumption via an automatically submitted form containing a KEYGEN element, a related issue to CVE-2009-1828...

CVE-2009-3268

Removed by vendor...

CVE-2009-3267

The CVE-2009-3267 entry covers Internet Explorer (IE) versions 6 (6.0.2900.2180) and 7 (7.0.6000.16711). The vulnerability is a denial of service caused by processing an automatically submitted form containing a KEYGEN element, leading to CPU consumption. The connected OpenVAS entries corroborate...

CVE-2009-3269

Affected software: Opera 9.52 and earlier. Vulnerability: remote attackers can cause a denial of service (CPU consumption) through a series of automatic submissions of a form containing a KEYGEN element. This is the described impact. Root cause / context: the issue is linked to CVE-2009-1828 in r...

CVE-2009-3269

Opera 9.52 and earlier allows remote attackers to cause a denial of service CPU consumption via a series of automatic submissions of a form containing a KEYGEN element, a related issue to CVE-2009-1828...

CVE-2009-3268

The provided connected data confirms CVE-2009-3268 affects Google Chrome 1.0.154.48 and earlier, and is a remote DoS vulnerability caused by processing an automatically submitted form containing a KEYGEN element (related to CVE-2009-1828). The OpenVAS entry mirrors this: a Chrome KEYGEN-based DoS...

CVE-2009-3268

Google Chrome 1.0.154.48 and earlier allows remote attackers to cause a denial of service CPU consumption via an automatically submitted form containing a KEYGEN element, a related issue to CVE-2009-1828...

CVE-2009-3268: Undefined Security Weakness

Google Chrome 1.0.154.48 and earlier allows remote attackers to cause a denial of service CPU consumption via an automatically submitted form containing a KEYGEN element, a related issue to CVE-2009-1828...

CVE-2009-3269: Undefined Security Weakness

Opera 9.52 and earlier allows remote attackers to cause a denial of service CPU consumption via a series of automatic submissions of a form containing a KEYGEN element, a related issue to CVE-2009-1828...

Design/Logic Flaw

xscreensaver aka Gnome-XScreenSaver in Sun Solaris 10, and OpenSolaris snv109 through snv122, does not properly handle Trusted Extensions, which allows local users to cause a denial of service CPU consumption and console hang by locking the screen, related to a regression in certain Solaris and...

CVE-2009-3101

xscreensaver aka Gnome-XScreenSaver in Sun Solaris 10, and OpenSolaris snv109 through snv122, does not properly handle Trusted Extensions, which allows local users to cause a denial of service CPU consumption and console hang by locking the screen, related to a regression in certain Solaris and...

CVE-2009-3101

xscreensaver aka Gnome-XScreenSaver in Sun Solaris 10, and OpenSolaris snv109 through snv122, does not properly handle Trusted Extensions, which allows local users to cause a denial of service CPU consumption and console hang by locking the screen, related to a regression in certain Solaris and...

CVE-2009-3101

The CVE-2009-3101 issue affects xscreensaver (Gnome-XScreenSaver) on Sun Solaris 10 and OpenSolaris (snv_109–snv_122). Root cause: a regression in certain patches related to Trusted Extensions handling, leading to denial of service via screen locking (CPU consumption and console hang). Impact is ...