CVE-2006-0025: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in Microsoft Windows Media Player 9 and 10 allows remote attackers to execute arbitrary code via a PNG image with a large chunk size...

Buffer overflow

Multiple buffer overflows in the 1 vGetPost and 2 main functions in easy-scart.c through easy-scart6.c in iShopCart allow remote attackers to execute arbitrary code by sending a large amount of data containing "Submit" in an sslinvoice action, and allow remote attackers to have an unknown impact...

CVE-2006-2814

Multiple buffer overflows in the 1 vGetPost and 2 main functions in easy-scart.c through easy-scart6.c in iShopCart allow remote attackers to execute arbitrary code by sending a large amount of data containing "Submit" in an sslinvoice action, and allow remote attackers to have an unknown impact...

CVE-2006-2814

Multiple buffer overflows in the 1 vGetPost and 2 main functions in easy-scart.c through easy-scart6.c in iShopCart allow remote attackers to execute arbitrary code by sending a large amount of data containing "Submit" in an sslinvoice action, and allow remote attackers to have an unknown impact...

Buffer overflow

Multiple buffer overflows in Raydium before SVN revision 310 allow remote attackers to execute arbitrary code via a large packet when logged via 1 the raydiumlog function in log.c or 2 the raydiumconsolelineadd function in console.c, possibly from a long player name...

CVE-2006-2408

Multiple buffer overflows in Raydium before SVN revision 310 allow remote attackers to execute arbitrary code via a large packet when logged via 1 the raydiumlog function in log.c or 2 the raydiumconsolelineadd function in console.c, possibly from a long player name...

CVE-2006-2408

Multiple buffer overflows in Raydium before SVN revision 310 allow remote attackers to execute arbitrary code via a large packet when logged via 1 the raydiumlog function in log.c or 2 the raydiumconsolelineadd function in console.c, possibly from a long player name...

CVE-2006-2400

The leetnet functions leetnet/rudp.cpp in Outgun 1.0.3 bot 2 and earlier allow remote attackers to cause a denial of service game interruption via large packets, which cause an exception to be thrown...

CVE-2006-2400: Undefined Security Weakness

The leetnet functions leetnet/rudp.cpp in Outgun 1.0.3 bot 2 and earlier allow remote attackers to cause a denial of service game interruption via large packets, which cause an exception to be thrown...

Buffer overflow

Multiple buffer overflows in Apple QuickTime before 7.1 allow remote attackers to execute arbitrary code via a crafted QuickTime movie .MOV, as demonstrated via a large size for a udta Atom...

security flaw

The HTTP/XMLRPC server in Ruby before 1.8.2 uses blocking sockets, which allows attackers to cause a denial of service blocked connections via a large amount of data...

zawhttpd Web server DoS

DoS on GET request with large number of slashes...

CVE-2006-1998

OpenTTD 0.4.7 and earlier allows local users to cause a denial of service application exit via a large invalid error number, which triggers an error...

Safari MacOS X DoS

Large rowspan number leads to CPU and memory consumption...

USN-273-1: Ruby vulnerability

Yukihiro Matsumoto reported that Ruby's HTTP module uses blocking sockets. By sending large amounts of data to a server application that uses this module, a remote attacker could exploit this to render this application unusable and not respond any more to other clients Denial of Service...

security flaw

Integer overflow in Mozilla Firefox and Thunderbird 1.x before 1.5 and 1.0.x before 1.0.8, Mozilla Suite before 1.7.13, and SeaMonkey before 1.0 allows remote attackers to cause a denial of service crash and possibly execute arbitrary bytecode via JavaScript with a large regular expression...

Design/Logic Flaw

IBM WebSphere Application Server 4.0.1 through 4.0.3 allows remote attackers to cause a denial of service application crash via an HTTP request with a large header...

CVE-2006-1619

IBM WebSphere Application Server 4.0.1 through 4.0.3 allows remote attackers to cause a denial of service application crash via an HTTP request with a large header...

CVE-2006-1619: Undefined Security Weakness

IBM WebSphere Application Server 4.0.1 through 4.0.3 allows remote attackers to cause a denial of service application crash via an HTTP request with a large header...

Code injection

Vavoom 1.19.1 and earlier allows remote attackers to cause a denial of service infinite loop via 1 a packet with no data or 2 a large packet, which prevents Vavoom from discarding the packet from the socket...