Vulnerabilities > Resource Management Errors

DATE CVE VULNERABILITY TITLE RISK
2011-05-31 CVE-2011-0943 Resource Management Errors vulnerability in Cisco IOS XR 3.8.3/3.8.4/3.9.1
Cisco IOS XR 3.8.3, 3.8.4, and 3.9.1 allows remote attackers to cause a denial of service (NetIO process restart or device reload) via a crafted IPv4 packet, aka Bug ID CSCth44147.
network
low complexity
cisco CWE-399
7.8
2011-05-26 CVE-2011-2173 Resource Management Errors vulnerability in IBM Websphere Portal 6.0.1.7/7.0.0.1
The implementation of OutputMediator objects in IBM WebSphere Portal 6.0.1.7, and 7.0.0.1 before CF002, allows remote authenticated users to cause a denial of service (memory consumption) via requests.
network
low complexity
ibm CWE-399
4.0
2011-05-24 CVE-2011-1521 Resource Management Errors vulnerability in Python
The urllib and urllib2 modules in Python 2.x before 2.7.2 and 3.x before 3.2.1 process Location headers that specify redirection to file: URLs, which makes it easier for remote attackers to obtain sensitive information or cause a denial of service (resource consumption) via a crafted URL, as demonstrated by the file:///etc/passwd and file:///dev/zero URLs.
network
low complexity
python CWE-399
6.4
2011-05-23 CVE-2011-1575 Resource Management Errors vulnerability in Pureftpd Pure-Ftpd
The STARTTLS implementation in ftp_parser.c in Pure-FTPd before 1.0.30 does not properly restrict I/O buffering, which allows man-in-the-middle attackers to insert commands into encrypted FTP sessions by sending a cleartext command that is processed after TLS is in place, related to a "plaintext command injection" attack, a similar issue to CVE-2011-0411.
network
pureftpd CWE-399
5.8
2011-05-20 CVE-2011-2161 Resource Management Errors vulnerability in Ffmpeg
The ape_read_header function in ape.c in libavformat in FFmpeg before 0.5.4, as used in MPlayer, VideoLAN VLC media player, and other products, allows remote attackers to cause a denial of service (application crash) via an APE (aka Monkey's Audio) file that contains a header but no frames.
network
ffmpeg CWE-399
4.3
2011-05-20 CVE-2011-0723 Resource Management Errors vulnerability in multiple products
FFmpeg 0.5.x, as used in MPlayer and other products, allows remote attackers to cause a denial of service (application crash) or possibly execute arbitrary code via a malformed VC-1 file.
6.8
2011-05-20 CVE-2009-5075 Resource Management Errors vulnerability in Monkeysaudio Monkey'S Audio
Monkey's Audio before 4.02 allows remote attackers to cause a denial of service (application crash) via a malformed APE file.
4.3
2011-05-20 CVE-2006-7245 Resource Management Errors vulnerability in Monkeysaudio Monkey'S Audio
Monkey's Audio before 4.01b2 allows remote attackers to cause a denial of service (application crash) via an APX file that lacks NULL termination.
4.3
2011-05-16 CVE-2011-2144 Resource Management Errors vulnerability in IBM Datacap Taskmaster Capture 8.0.1
The eDocument Conversion Actions implementation in IBM Datacap Taskmaster Capture 8.0.1 FP1 and earlier allows remote attackers to cause a denial of service (batch abort) via a long subject line in an e-mail message that is represented in a .eml file.
network
low complexity
ibm CWE-399
5.0
2011-05-16 CVE-2011-0612 Resource Management Errors vulnerability in Adobe Flash Media Server
Adobe Flash Media Server (FMS) before 3.5.6, and 4.x before 4.0.2, allows remote attackers to cause a denial of service (XML data corruption) via unspecified vectors.
network
low complexity
adobe CWE-399
5.0