CVE-2006-3653

CVE-2006-3653 affects wksss.exe 8.4.702.0 in Microsoft Works Spreadsheet 8.0. A remote attacker can cause a denial of service by processing crafted (1) Works, (2) Excel, and (3) Lotus 1-2-3 files. Impact stated: CPU consumption or crash, with a low base score (CVSS v2: 2.6) and partial availabili...

CVE-2006-3654

The CVE-2006-3654 entry affects Microsoft Works Spreadsheet 8.0 (wksss.exe 8.4.702.0). The underlying issue is a buffer overflow triggered by crafted Excel files, enabling remote attackers to cause a denial of service (CPU consumption or crash). No patch/fix details are provided in the connected ...

CVE-2006-3653: Undefined Security Weakness

wksss.exe 8.4.702.0 in Microsoft Works Spreadsheet 8.0 allows remote attackers to cause a denial of service CPU consumption or crash via crafted 1 Works, 2 Excel, and 3 Lotus 1-2-3 files...

CVE-2006-3379

Algorithmic complexity vulnerability in Hiki Wiki 0.6.0 through 0.6.5 and 0.8.0 through 0.8.5 allows remote attackers to cause a denial of service CPU consumption by performing a diff between large, crafted pages that trigger the worst case...

CVE-2006-3380

Algorithmic complexity vulnerability in FreeStyle Wiki before 3.6.2 allows remote attackers to cause a denial of service CPU consumption by performing a diff between large, crafted pages that trigger the worst case...

CVE-2006-3379

Algorithmic complexity vulnerability in Hiki Wiki 0.6.0 through 0.6.5 and 0.8.0 through 0.8.5 allows remote attackers to cause a denial of service CPU consumption by performing a diff between large, crafted pages that trigger the worst case...

CVE-2006-3393

Papyrus NASCAR Racing 4 4.1.3.1.6 and earlier, 2002 Season 1.1.0.2 and earlier, and 2003 Season 1.2.0.1 and earlier allows remote attackers to cause a denial of service CPU consumption by sending an empty UDP datagram, which is not properly discarded due to use of the FIONREAD asynchronous socket...

CVE-2006-3379

Algorithmic complexity vulnerability in Hiki Wiki 0.6.0 through 0.6.5 and 0.8.0 through 0.8.5 allows remote attackers to cause a denial of service CPU consumption by performing a diff between large, crafted pages that trigger the worst case...

CVE-2006-3380

CVE-2006-3380 affects FreeStyle Wiki before 3.6.2, where an algorithmic complexity vulnerability allows a remote attacker to cause a denial of service by diffing large, crafted pages to trigger worst-case behavior. The connected JVN entry and NVD record corroborate a DoS via CPU consumption, trig...

CVE-2006-3379

Algorithmic complexity vulnerability in Hiki Wiki 0.6.0 through 0.6.5 and 0.8.0 through 0.8.5 allows remote attackers to cause a denial of service CPU consumption by performing a diff between large, crafted pages that trigger the worst case...

CVE-2006-3393

Papyrus NASCAR Racing 4 4.1.3.1.6 and earlier, 2002 Season 1.1.0.2 and earlier, and 2003 Season 1.2.0.1 and earlier allows remote attackers to cause a denial of service CPU consumption by sending an empty UDP datagram, which is not properly discarded due to use of the FIONREAD asynchronous socket...

CVE-2006-3393

CVE-2006-3393 affects Papyrus NASCAR Racing versions up to 4.1.3.1.6 (and specific earlier season releases). The flaw allows remote attackers to cause a denial of service by sending an empty UDP datagram, which is not properly discarded due to the use of the FIONREAD asynchronous socket, leading ...

CVE-2006-3393: Undefined Security Weakness

Papyrus NASCAR Racing 4 4.1.3.1.6 and earlier, 2002 Season 1.1.0.2 and earlier, and 2003 Season 1.2.0.1 and earlier allows remote attackers to cause a denial of service CPU consumption by sending an empty UDP datagram, which is not properly discarded due to use of the FIONREAD asynchronous socket...

CVE-2006-3379: Undefined Security Weakness

Algorithmic complexity vulnerability in Hiki Wiki 0.6.0 through 0.6.5 and 0.8.0 through 0.8.5 allows remote attackers to cause a denial of service CPU consumption by performing a diff between large, crafted pages that trigger the worst case...

CVE-2006-3380: Undefined Security Weakness

Algorithmic complexity vulnerability in FreeStyle Wiki before 3.6.2 allows remote attackers to cause a denial of service CPU consumption by performing a diff between large, crafted pages that trigger the worst case...

[Full-disclosure] [ MDKSA-2006:112 ] - Updated gd packages fix DoS vulnerability.

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:112 http://www.mandriva.com/security/ Package : gd Date : June 27, 2006 Affected: 10.2, 2006.0 Problem Description: The LZW decoding in the gdImageCreateFromGifPtr function in the Thomas Boutell graphics dra...

[Full-disclosure] [ MDKSA-2006:113 ] - Updated tetex packages fix embedded GD vulnerabilities

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Mandriva Linux Security Advisory MDKSA-2006:113 http://www.mandriva.com/security/ Package : tetex Date : June 27, 2006 Affected: 10.2, 2006.0 Problem Description: Integer overflows were reported in the GD Graphics Library libgd 2.0.28, and possibly...

Mandrake Linux Security Advisory : tetex (MDKSA-2006:113)

Integer overflows were reported in the GD Graphics Library libgd 2.0.28, and possibly other versions. These overflows allow remote attackers to cause a denial of service and possibly execute arbitrary code via PNG image files with large image rows values that lead to a heap-based buffer overflow ...

Mandrake Linux Security Advisory : gd (MDKSA-2006:112)

The LZW decoding in the gdImageCreateFromGifPtr function in the Thomas Boutell graphics draw GD library aka libgd 2.0.33 allows remote attackers to cause a denial of service CPU consumption via malformed GIF data that causes an infinite loop. gd-2.0.15 in Corporate 3.0 is not affected by this...

CVE-2006-3224

CVE-2006-3224 affects Apple Safari 2.0.3 (417.9.3) running on Mac OS X 10.4.6. The issue allows remote attackers to trigger high CPU usage and denial of service by executing JavaScript containing an infinite for loop. The description notes this might not constitute a vulnerability outside Safari’...