Vulnerabilities > Resource Management Errors

DATE CVE VULNERABILITY TITLE RISK
2010-06-24 CVE-2010-1198 Resource Management Errors vulnerability in Mozilla Firefox and Seamonkey
Use-after-free vulnerability in Mozilla Firefox 3.5.x before 3.5.10 and 3.6.x before 3.6.4, and SeaMonkey before 2.0.5, allows remote attackers to execute arbitrary code via vectors involving multiple plugin instances.
network
mozilla CWE-399
critical
9.3
2010-06-24 CVE-2010-0183 Resource Management Errors vulnerability in Mozilla Firefox and Seamonkey
Use-after-free vulnerability in the nsCycleCollector::MarkRoots function in Mozilla Firefox 3.5.x before 3.5.10 and SeaMonkey before 2.0.5 allows remote attackers to execute arbitrary code via a crafted HTML document, related to an improper frame construction process for menus.
network
mozilla CWE-399
critical
9.3
2010-06-22 CVE-2010-2432 Resource Management Errors vulnerability in Apple Cups
The cupsDoAuthentication function in auth.c in the client in CUPS before 1.4.4, when HAVE_GSSAPI is omitted, does not properly handle a demand for authorization, which allows remote CUPS servers to cause a denial of service (infinite loop) via HTTP_UNAUTHORIZED responses.
network
low complexity
apple CWE-399
5.0
2010-06-21 CVE-2010-2349 Resource Management Errors vulnerability in Timhillone H264Webcam 3.7
H264WebCam 3.7 allows remote attackers to cause a denial of service (crash) via a long URI in a GET request, which triggers a NULL pointer dereference.
network
low complexity
timhillone CWE-399
5.0
2010-06-18 CVE-2010-1387 Resource Management Errors vulnerability in Apple Itunes
Use-after-free vulnerability in JavaScriptCore in WebKit in Apple iTunes before 9.2 on Windows, and Apple iOS before 4 on the iPhone and iPod touch, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to page transitions, a different vulnerability than CVE-2010-1763 and CVE-2010-1769.
network
apple CWE-399
critical
9.3
2010-06-15 CVE-2010-2164 Resource Management Errors vulnerability in multiple products
Use-after-free vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, might allow attackers to execute arbitrary code via unspecified vectors related to an unspecified "image type within a certain function." Per: http://www.adobe.com/support/security/bulletins/apsb10-14.html 'Affected software versions Adobe Flash Player 10.0.45.2 and earlier versions for Windows, Macintosh, Linux and Solaris Adobe AIR 1.5.3.9130 and earlier versions for Windows, Macintosh and Linux'
network
adobe macromedia CWE-399
critical
9.3
2010-06-15 CVE-2009-3793 Resource Management Errors vulnerability in multiple products
Unspecified vulnerability in Adobe Flash Player before 9.0.277.0 and 10.x before 10.1.53.64, and Adobe AIR before 2.0.2.12610, allows attackers to cause a denial of service (memory consumption) or possibly execute arbitrary code via unknown vectors.
network
adobe macromedia CWE-399
critical
9.3
2010-06-15 CVE-2010-2286 Resource Management Errors vulnerability in Wireshark
The SigComp Universal Decompressor Virtual Machine dissector in Wireshark 0.10.7 through 1.0.13 and 1.2.0 through 1.2.8 allows remote attackers to cause a denial of service (infinite loop) via unknown vectors.
low complexity
wireshark CWE-399
3.3
2010-06-11 CVE-2010-1771 Resource Management Errors vulnerability in Apple Safari and Webkit
Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving fonts.
network
apple microsoft CWE-399
critical
9.3
2010-06-11 CVE-2010-1761 Resource Management Errors vulnerability in Apple Safari and Webkit
Use-after-free vulnerability in WebKit in Apple Safari before 5.0 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1 on Mac OS X 10.4, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors involving HTML document subtrees.
network
apple microsoft CWE-399
critical
9.3