Vulnerabilities > Resource Management Errors

DATE CVE VULNERABILITY TITLE RISK
2010-12-08 CVE-2010-3699 Resource Management Errors vulnerability in Citrix XEN
The backend driver in Xen 3.x allows guest OS users to cause a denial of service via a kernel thread leak, which prevents the device and guest OS from being shut down or create a zombie domain, causes a hang in zenwatch, or prevents unspecified xm commands from working properly, related to (1) netback, (2) blkback, or (3) blktap.
low complexity
citrix CWE-399
2.7
2010-12-07 CVE-2010-4150 Resource Management Errors vulnerability in PHP
Double free vulnerability in the imap_do_open function in the IMAP extension (ext/imap/php_imap.c) in PHP 5.2 before 5.2.15 and 5.3 before 5.3.4 allows attackers to cause a denial of service (memory corruption) or possibly execute arbitrary code via unspecified vectors.
network
low complexity
php CWE-399
5.0
2010-12-07 CVE-2010-4486 Resource Management Errors vulnerability in Google Chrome
Use-after-free vulnerability in Google Chrome before 8.0.552.215 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to history handling.
network
google CWE-399
critical
9.3
2010-12-02 CVE-2010-4374 Resource Management Errors vulnerability in Nullsoft Winamp
The in_mkv plugin in Winamp before 5.6 allows remote attackers to cause a denial of service (application crash) via a Matroska Video (MKV) file containing a string with a crafted length.
network
nullsoft CWE-399
4.3
2010-11-26 CVE-2010-4301 Resource Management Errors vulnerability in Wireshark 1.4.0/1.4.1
epan/dissectors/packet-zbee-zcl.c in the ZigBee ZCL dissector in Wireshark 1.4.0 through 1.4.1 allows remote attackers to cause a denial of service (infinite loop) via a crafted ZCL packet, related to Discover Attributes.
network
low complexity
wireshark CWE-399
5.0
2010-11-26 CVE-2010-3445 Resource Management Errors vulnerability in Wireshark
Stack consumption vulnerability in the dissect_ber_unknown function in epan/dissectors/packet-ber.c in the BER dissector in Wireshark 1.4.x before 1.4.1 and 1.2.x before 1.2.12 allows remote attackers to cause a denial of service (NULL pointer dereference and crash) via a long string in an unknown ASN.1/BER encoded packet, as demonstrated using SNMP.
network
low complexity
wireshark CWE-399
5.0
2010-11-22 CVE-2010-3824 Resource Management Errors vulnerability in Apple Safari and Webkit
Use-after-free vulnerability in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving SVG use elements.
network
apple microsoft CWE-399
critical
9.3
2010-11-22 CVE-2010-3823 Resource Management Errors vulnerability in Apple Safari and Webkit
Use-after-free vulnerability in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving Geolocation objects.
network
apple microsoft CWE-399
critical
9.3
2010-11-22 CVE-2010-3820 Resource Management Errors vulnerability in Apple Safari and Webkit
WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, accesses uninitialized memory during processing of editable elements, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted web site.
network
apple microsoft CWE-399
critical
9.3
2010-11-22 CVE-2010-3818 Resource Management Errors vulnerability in Apple Safari and Webkit
Use-after-free vulnerability in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving inline text boxes.
network
apple microsoft CWE-399
critical
9.3