1103 matches found
Memory corruption
Stack consumption vulnerability in the dopagefault function in arch/x86/mm/fault.c in the Linux kernel before 2.6.28.5 allows local users to cause a denial of service memory corruption or possibly gain privileges via unspecified vectors that trigger page faults on a machine that has a registered...
CVE-2009-0605
CVE-2009-0605 is a Linux kernel vulnerability affecting the do_page_fault path in arch/x86/mm/fault.c, present in 2.6.x up to 2.6.28.5. A local user with a registered Kprobes probe can trigger page faults to cause memory exhaustion, enabling denial of service and potentially privilege gain. The f...
CVE-2009-0341
The shell32 module in Microsoft Internet Explorer 7.0 on Windows XP SP3 might allow remote attackers to execute arbitrary code via a long VALUE attribute in an INPUT element, possibly related to a stack consumption vulnerability...
Design/Logic Flaw
The shell32 module in Microsoft Internet Explorer 7.0 on Windows XP SP3 might allow remote attackers to execute arbitrary code via a long VALUE attribute in an INPUT element, possibly related to a stack consumption vulnerability...
CVE-2009-0341
CVE-2009-0341 concerns Microsoft Internet Explorer 7.0 on Windows XP SP3, where the shell32 module may be vulnerable to an input element with an excessively long VALUE attribute. The NVD description indicates a possible remote code execution through this long VALUE attribute, potentially tied to ...
Norton Internet Security Denial of Service Vulnerability
This host has Norton AntiVius in Norton Internet Security installed and is prone to Denial of Service Vulnerability. OpenVAS Vulnerability Test $Id: gbnortoninternetsecdosvuln.nasl 5370 2017-02-20 15:24:26Z cfi $ Norton Internet Security Denial of Service Vulnerability Authors: Sharath S Copyrigh...
Norton Internet Security Denial of Service Vulnerability
Norton AntiVius in Norton Internet Security is prone to a denial of service DoS vulnerability. SPDX-FileCopyrightText: 2008 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only...
Design/Logic Flaw
Norton Antivirus in Norton Internet Security 15.5.0.23 does not properly handle 1 multipart/mixed e-mail messages with many MIME parts and possibly 2 e-mail messages with many "Content-type: message/rfc822;" headers, which allows remote attackers to cause a denial of service stack consumption or...
Design/Logic Flaw
Incredimail build 5853710 does not properly handle 1 multipart/mixed e-mail messages with many MIME parts and possibly 2 e-mail messages with many "Content-type: message/rfc822;" headers, which allows remote attackers to cause a denial of service stack consumption or other resource consumption vi...
CVE-2008-5428
Opera 9.51 on Windows XP does not properly handle 1 multipart/mixed e-mail messages with many MIME parts and possibly 2 e-mail messages with many "Content-type: message/rfc822;" headers, which allows remote attackers to cause a denial of service stack consumption or other resource consumption via...
CVE-2008-5427
Summary (CVE-2008-5427 family) : Several products fail to properly handle large or complex MIME email messages, specifically (1) multipart/mixed messages with many parts and (2) many Content-type: message/rfc822 headers, leading to potential denial of service through stack/resource consumption. D...
CVE-2008-5429
Incredimail build 5853710 is affected by a denial-of-service issue triggered by large MIME-structured emails, including (1) multipart/mixed messages with many parts and (2) many Content-type: message/rfc822 headers. The underlying risk is resource consumption (stack/CPU/memory). The description n...
[SECURITY] [DSA 1680-1] New clamav packages fix potential code execution
------------------------------------------------------------------------ Debian Security Advisory DSA-1680-1 [email protected] http://www.debian.org/security/ Florian Weimer December 04, 2008 http://www.debian.org/security/faq -...
Debian DSA-1680-1 : clamav - buffer overflow, stack consumption
Moritz Jodeit discovered that ClamAV, an anti-virus solution, suffers from an off-by-one-error in its VBA project file processing, leading to a heap-based buffer overflow and potentially arbitrary code execution CVE-2008-5050 . Ilja van Sprundel discovered that ClamAV contains a denial of service...
CVE-2008-5314
Stack consumption vulnerability in libclamav/special.c in ClamAV before 0.94.2 allows remote attackers to cause a denial of service daemon crash via a crafted JPEG file, related to the clicheckjpegexploit, jpegcheckphotoshop, and jpegcheckphotoshop8bim functions...
CVE-2008-5314
Stack consumption vulnerability in libclamav/special.c in ClamAV before 0.94.2 allows remote attackers to cause a denial of service daemon crash via a crafted JPEG file, related to the clicheckjpegexploit, jpegcheckphotoshop, and jpegcheckphotoshop8bim functions...
Design/Logic Flaw
Stack consumption vulnerability in libclamav/special.c in ClamAV before 0.94.2 allows remote attackers to cause a denial of service daemon crash via a crafted JPEG file, related to the clicheckjpegexploit, jpegcheckphotoshop, and jpegcheckphotoshop8bim functions...
CVE-2008-5314
Stack consumption vulnerability in libclamav/special.c in ClamAV before 0.94.2 allows remote attackers to cause a denial of service daemon crash via a crafted JPEG file, related to the clicheckjpegexploit, jpegcheckphotoshop, and jpegcheckphotoshop8bim functions...
CVE-2008-4482
The XML parser in Xerces-C++ before 3.0.0 allows context-dependent attackers to cause a denial of service stack consumption and crash via an XML schema definition with a large maxOccurs value, which triggers excessive memory consumption during validation of an XML file...
Code injection
Multiple unspecified vulnerabilities in ReSIProcate before 1.3.4 allow remote attackers to cause a denial of service stack consumption via unknown network traffic with a large "bytes-in-memory/bytes-on-wire ratio."...