Vulnerabilities > Resource Management Errors

DATE CVE VULNERABILITY TITLE RISK
2011-03-03 CVE-2011-1140 Resource Management Errors vulnerability in Wireshark
Multiple stack consumption vulnerabilities in the dissect_ms_compressed_string and dissect_mscldap_string functions in Wireshark 1.0.x, 1.2.0 through 1.2.14, and 1.4.0 through 1.4.3 allow remote attackers to cause a denial of service (infinite recursion) via a crafted (1) SMB or (2) Connection-less LDAP (CLDAP) packet.
network
wireshark CWE-399
4.3
2011-03-03 CVE-2011-1139 Resource Management Errors vulnerability in Wireshark
wiretap/pcapng.c in Wireshark 1.2.0 through 1.2.14 and 1.4.0 through 1.4.3 allows remote attackers to cause a denial of service (application crash) via a pcap-ng file that contains a large packet-length field.
network
wireshark CWE-399
4.3
2011-03-02 CVE-2011-0057 Resource Management Errors vulnerability in Mozilla Firefox and Seamonkey
Use-after-free vulnerability in the Web Workers implementation in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, allows remote attackers to execute arbitrary code via vectors related to a JavaScript Worker and garbage collection.
network
low complexity
mozilla CWE-399
critical
10.0
2011-03-02 CVE-2011-0055 Resource Management Errors vulnerability in Mozilla Firefox and Seamonkey
Use-after-free vulnerability in the JSON.stringify method in js3250.dll in Mozilla Firefox before 3.5.17 and 3.6.x before 3.6.14, and SeaMonkey before 2.0.12, might allow remote attackers to execute arbitrary code via unspecified vectors related to the js_HasOwnProperty function and garbage collection.
network
low complexity
mozilla CWE-399
critical
10.0
2011-03-02 CVE-2010-4756 Resource Management Errors vulnerability in GNU Glibc
The glob implementation in the GNU C Library (aka glibc or libc6) allows remote authenticated users to cause a denial of service (CPU and memory consumption) via crafted glob expressions that do not match any pathnames, as demonstrated by glob expressions in STAT commands to an FTP daemon, a different vulnerability than CVE-2010-2632.
network
low complexity
gnu CWE-399
4.0
2011-03-02 CVE-2010-4755 Resource Management Errors vulnerability in multiple products
The (1) remote_glob function in sftp-glob.c and the (2) process_put function in sftp.c in OpenSSH 5.8 and earlier, as used in FreeBSD 7.3 and 8.1, NetBSD 5.0.2, OpenBSD 4.7, and other products, allow remote authenticated users to cause a denial of service (CPU and memory consumption) via crafted glob expressions that do not match any pathnames, as demonstrated by glob expressions in SSH_FXP_STAT requests to an sftp daemon, a different vulnerability than CVE-2010-2632.
network
low complexity
openbsd freebsd netbsd CWE-399
4.0
2011-03-02 CVE-2010-4754 Resource Management Errors vulnerability in multiple products
The glob implementation in libc in FreeBSD 7.3 and 8.1, NetBSD 5.0.2, and OpenBSD 4.7, and Libsystem in Apple Mac OS X before 10.6.8, allows remote authenticated users to cause a denial of service (CPU and memory consumption) via crafted glob expressions that do not match any pathnames, as demonstrated by glob expressions in STAT commands to an FTP daemon, a different vulnerability than CVE-2010-2632.
network
low complexity
apple freebsd netbsd openbsd CWE-399
4.0
2011-02-25 CVE-2011-0391 Resource Management Errors vulnerability in Cisco products
Cisco TelePresence Recording Server devices with software 1.6.x allow remote attackers to cause a denial of service (thread consumption and device outage) via a malformed request, related to an "ad hoc recording" issue, aka Bug ID CSCtf97205.
network
low complexity
cisco CWE-399
7.8
2011-02-25 CVE-2011-0390 Resource Management Errors vulnerability in Cisco products
The XML-RPC implementation on Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, 1.6.x, and 1.7.0 allows remote attackers to cause a denial of service (process crash) via a crafted request, aka Bug ID CSCtj44534.
network
low complexity
cisco CWE-399
7.8
2011-02-25 CVE-2011-0389 Resource Management Errors vulnerability in Cisco products
Cisco TelePresence Multipoint Switch (CTMS) devices with software 1.0.x, 1.1.x, 1.5.x, and 1.6.x allow remote attackers to cause a denial of service (process crash) via a crafted Real-Time Transport Control Protocol (RTCP) UDP packet, aka Bug ID CSCth60993.
network
low complexity
cisco CWE-399
7.8