Vulnerabilities > Resource Management Errors

DATE CVE VULNERABILITY TITLE RISK
2011-11-01 CVE-2011-4219 Resource Management Errors vulnerability in Investintech Slimpdf Reader
Investintech.com SlimPDF Reader does not prevent faulting-address data from affecting branch selection, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document.
network
investintech CWE-399
critical
9.3
2011-11-01 CVE-2011-4218 Resource Management Errors vulnerability in Investintech Slimpdf Reader
Investintech.com SlimPDF Reader does not prevent faulting-instruction data from affecting write operations, which allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a crafted PDF document.
network
investintech CWE-399
critical
9.3
2011-11-01 CVE-2011-0941 Resource Management Errors vulnerability in Cisco IOS and Unified Communications Manager
Memory leak in Cisco Unified Communications Manager (CUCM) 6.x before 6.1(5)su2, 7.x before 7.1(5b)su3, 8.x before 8.0(3a)su1, and 8.5 before 8.5(1), and Cisco IOS 12.4 and 15.1, allows remote attackers to cause a denial of service (memory consumption and process failure or device reload) via a malformed SIP message, aka Bug IDs CSCti75128 and CSCtj09179.
network
low complexity
cisco CWE-399
7.8
2011-10-29 CVE-2010-0780 Resource Management Errors vulnerability in IBM Websphere MQ
IBM WebSphere MQ 7.x before 7.0.1.4 allows remote attackers to cause a denial of service (disk consumption) via multiple connection attempts to a stopped queue manager.
network
ibm CWE-399
4.3
2011-10-27 CVE-2011-3318 Resource Management Errors vulnerability in Cisco products
Cisco Video Surveillance 2421 and 2500 series cameras with software 1.1.x and 2.x before 2.4.0 and Video Surveillance 2600 series cameras with software before 4.2.0-13 allow remote attackers to cause a denial of service (device reload) by sending crafted RTSP packets over TCP, aka Bug IDs CSCtj96312, CSCtj39462, and CSCtl80175.
network
low complexity
cisco CWE-399
7.8
2011-10-19 CVE-2011-4137 Resource Management Errors vulnerability in Djangoproject Django
The verify_exists functionality in the URLField implementation in Django before 1.2.7 and 1.3.x before 1.3.1 relies on Python libraries that attempt access to an arbitrary URL with no timeout, which allows remote attackers to cause a denial of service (resource consumption) via a URL associated with (1) a slow response, (2) a completed TCP connection with no application data sent, or (3) a large amount of application data, a related issue to CVE-2011-1521.
network
low complexity
djangoproject CWE-399
5.0
2011-10-14 CVE-2011-3432 Resource Management Errors vulnerability in Apple Iphone OS
The UIKit Alerts component in Apple iOS before 5 allows remote attackers to cause a denial of service (device hang) via a long tel: URL that triggers a large size for the acceptance dialog.
network
low complexity
apple CWE-399
5.0
2011-10-14 CVE-2011-3259 Resource Management Errors vulnerability in Apple TV and Iphone OS
The kernel in Apple iOS before 5 and Apple TV before 4.4 does not properly recover memory allocated for incomplete TCP connections, which allows remote attackers to cause a denial of service (resource consumption) by making many connection attempts.
network
low complexity
apple CWE-399
5.0
2011-10-06 CVE-2011-3296 Resource Management Errors vulnerability in Cisco products
Cisco Firewall Services Module (aka FWSM) 3.1 before 3.1(21), 3.2 before 3.2(22), 4.0 before 4.0(16), and 4.1 before 4.1(7), when IPv6 is used, allows remote attackers to cause a denial of service (memory corruption and module crash or hang) via vectors that trigger syslog message 302015, aka Bug ID CSCti83875.
network
low complexity
cisco CWE-399
7.8
2011-10-06 CVE-2011-3287 Resource Management Errors vulnerability in Cisco Jabber Extensible Communications Platform 5.0/5.1/5.2
Cisco Jabber Extensible Communications Platform (aka Jabber XCP) 2.x through 5.4.x before 5.4.0.27581 and 5.8.x before 5.8.1.27561 does not properly detect recursion during entity expansion, which allows remote attackers to cause a denial of service (memory and CPU consumption, and process crash) via a crafted XML document containing a large number of nested entity references, aka Bug ID CSCtq78106, a similar issue to CVE-2003-1564.
network
low complexity
cisco CWE-399
7.8