CVE-2008-5428

Opera 9.51 on Windows XP does not properly handle 1 multipart/mixed e-mail messages with many MIME parts and possibly 2 e-mail messages with many "Content-type: message/rfc822;" headers, which allows remote attackers to cause a denial of service stack consumption or other resource consumption via...

CVE-2008-5427

Summary (CVE-2008-5427 family) : Several products fail to properly handle large or complex MIME email messages, specifically (1) multipart/mixed messages with many parts and (2) many Content-type: message/rfc822 headers, leading to potential denial of service through stack/resource consumption. D...

CVE-2008-5429

Incredimail build 5853710 is affected by a denial-of-service issue triggered by large MIME-structured emails, including (1) multipart/mixed messages with many parts and (2) many Content-type: message/rfc822 headers. The underlying risk is resource consumption (stack/CPU/memory). The description n...

[SECURITY] [DSA 1680-1] New clamav packages fix potential code execution

------------------------------------------------------------------------ Debian Security Advisory DSA-1680-1 [email protected] http://www.debian.org/security/ Florian Weimer December 04, 2008 http://www.debian.org/security/faq -...

Debian DSA-1680-1 : clamav - buffer overflow, stack consumption

Moritz Jodeit discovered that ClamAV, an anti-virus solution, suffers from an off-by-one-error in its VBA project file processing, leading to a heap-based buffer overflow and potentially arbitrary code execution CVE-2008-5050 . Ilja van Sprundel discovered that ClamAV contains a denial of service...

Design/Logic Flaw

Stack consumption vulnerability in libclamav/special.c in ClamAV before 0.94.2 allows remote attackers to cause a denial of service daemon crash via a crafted JPEG file, related to the clicheckjpegexploit, jpegcheckphotoshop, and jpegcheckphotoshop8bim functions...

CVE-2008-5314

Stack consumption vulnerability in libclamav/special.c in ClamAV before 0.94.2 allows remote attackers to cause a denial of service daemon crash via a crafted JPEG file, related to the clicheckjpegexploit, jpegcheckphotoshop, and jpegcheckphotoshop8bim functions...

CVE-2008-5314

Stack consumption vulnerability in libclamav/special.c in ClamAV before 0.94.2 allows remote attackers to cause a denial of service daemon crash via a crafted JPEG file, related to the clicheckjpegexploit, jpegcheckphotoshop, and jpegcheckphotoshop8bim functions...

CVE-2008-5314

Stack consumption vulnerability in libclamav/special.c in ClamAV before 0.94.2 allows remote attackers to cause a denial of service daemon crash via a crafted JPEG file, related to the clicheckjpegexploit, jpegcheckphotoshop, and jpegcheckphotoshop8bim functions...

CVE-2008-5314: Undefined Security Weakness

Stack consumption vulnerability in libclamav/special.c in ClamAV before 0.94.2 allows remote attackers to cause a denial of service daemon crash via a crafted JPEG file, related to the clicheckjpegexploit, jpegcheckphotoshop, and jpegcheckphotoshop8bim functions...

CVE-2008-4482

The XML parser in Xerces-C++ before 3.0.0 allows context-dependent attackers to cause a denial of service stack consumption and crash via an XML schema definition with a large maxOccurs value, which triggers excessive memory consumption during validation of an XML file...

Code injection

Multiple unspecified vulnerabilities in ReSIProcate before 1.3.4 allow remote attackers to cause a denial of service stack consumption via unknown network traffic with a large "bytes-in-memory/bytes-on-wire ratio."...

CVE-2008-3199

Multiple unspecified vulnerabilities in ReSIProcate before 1.3.4 allow remote attackers to cause a denial of service stack consumption via unknown network traffic with a large "bytes-in-memory/bytes-on-wire ratio."...

CVE-2008-3199

CVE-2008-3199 concerns multiple unspecified vulnerabilities in ReSIProcate prior to 1.3.4 that allow remote attackers to cause a denial of service (stack consumption) through unknown network traffic characterized by a large bytes-in-memory/bytes-on-wire ratio. The affected product is ReSIProcate;...

CVE-2008-3199: Improper Input Validation

Multiple unspecified vulnerabilities in ReSIProcate before 1.3.4 allow remote attackers to cause a denial of service stack consumption via unknown network traffic with a large "bytes-in-memory/bytes-on-wire ratio."...

CVE-2008-1689

Stack consumption vulnerability in WebContainer.exe 1.0.0.336 and earlier in SLMail Pro 6.3.1.0 and earlier allows remote attackers to cause a denial of service daemon crash via a long request header in an HTTP request to TCP port 801. NOTE: some of these details are obtained from third party...

CVE-2008-1689

CVE-2008-1689 is a stack consumption vulnerability affecting WebContainer.exe up to version 1.0.0.336 and SLMail Pro up to 6.3.1.0. A remote attacker can cause a denial of service (daemon crash) by sending a long request header in an HTTP request to TCP port 801. The provided documents identify t...

CVE-2008-1689: Undefined Security Weakness

Stack consumption vulnerability in WebContainer.exe 1.0.0.336 and earlier in SLMail Pro 6.3.1.0 and earlier allows remote attackers to cause a denial of service daemon crash via a long request header in an HTTP request to TCP port 801. NOTE: some of these details are obtained from third party...

Stack overflow

Stack consumption vulnerability in Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allows remote attackers to cause a denial of service daemon crash via a certain packet that triggers the recursive calling of a function...

CVE-2008-0979

Stack consumption vulnerability in Double-Take 5.0.0.2865 and earlier, distributed under the HP StorageWorks Storage Mirroring name and other names, allows remote attackers to cause a denial of service daemon crash via a certain packet that triggers the recursive calling of a function...