Vulnerabilities > Resource Management Errors

DATE CVE VULNERABILITY TITLE RISK
2009-05-01 CVE-2009-1511 Resource Management Errors vulnerability in Microsoft Windows XP
GDI+ in Microsoft Windows XP SP3 allows remote attackers to cause a denial of service (infinite loop) via a PNG file that contains a certain large btChunkLen value.
network
low complexity
microsoft CWE-399
7.8
2009-04-30 CVE-2009-1492 Resource Management Errors vulnerability in Adobe Acrobat and Acrobat Reader
The getAnnots Doc method in the JavaScript API in Adobe Reader and Acrobat 9.1, 8.1.4, 7.1.1, and earlier allows remote attackers to cause a denial of service (memory corruption) or execute arbitrary code via a PDF file that contains an annotation, and has an OpenAction entry with JavaScript code that calls this method with crafted integer arguments.
network
adobe CWE-399
critical
9.3
2009-04-27 CVE-2009-1190 Resource Management Errors vulnerability in SUN JDK
Algorithmic complexity vulnerability in the java.util.regex.Pattern.compile method in Sun Java Development Kit (JDK) before 1.6, when used with spring.jar in SpringSource Spring Framework 1.1.0 through 2.5.6 and 3.0.0.M1 through 3.0.0.M2 and dm Server 1.0.0 through 1.0.2, allows remote attackers to cause a denial of service (CPU consumption) via serializable data with a long regex string containing multiple optional groups, a related issue to CVE-2004-2540.
network
low complexity
sun springsource CWE-399
5.0
2009-04-27 CVE-2009-1435 Resource Management Errors vulnerability in Trendmicro Officescan 8.0
NTRtScan.exe in Trend Micro OfficeScan Client 8.0 SP1 and 8.0 SP1 Patch 1 allows local users to cause a denial of service (application crash) via directories with long pathnames.
local
low complexity
trendmicro CWE-399
2.1
2009-04-24 CVE-2009-0798 Resource Management Errors vulnerability in TIM Hockin Acpid
ACPI Event Daemon (acpid) before 1.0.10 allows remote attackers to cause a denial of service (CPU consumption and connectivity loss) by opening a large number of UNIX sockets without closing them, which triggers an infinite loop.
network
low complexity
tim-hockin CWE-399
5.0
2009-04-23 CVE-2009-1180 Resource Management Errors vulnerability in multiple products
The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and other products allows remote attackers to execute arbitrary code via a crafted PDF file that triggers a free of invalid data.
6.8
2009-04-23 CVE-2009-0166 Resource Management Errors vulnerability in multiple products
The JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allows remote attackers to cause a denial of service (crash) via a crafted PDF file that triggers a free of uninitialized memory.
4.3
2009-04-22 CVE-2009-1305 Resource Management Errors vulnerability in Mozilla Firefox, Seamonkey and Thunderbird
The JavaScript engine in Mozilla Firefox before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors involving JSOP_DEFVAR and properties that lack the JSPROP_PERMANENT attribute.
network
low complexity
mozilla CWE-399
5.0
2009-04-22 CVE-2009-1304 Resource Management Errors vulnerability in Mozilla Firefox, Seamonkey and Thunderbird
The JavaScript engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors involving (1) js_FindPropertyHelper, related to the definitions of Math and Date; and (2) js_CheckRedeclaration.
network
low complexity
mozilla CWE-399
5.0
2009-04-22 CVE-2009-1302 Resource Management Errors vulnerability in Mozilla Firefox, Seamonkey and Thunderbird
The browser engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey before 1.1.16 allows remote attackers to cause a denial of service (application crash) and possibly trigger memory corruption via vectors related to (1) nsAsyncInstantiateEvent::Run, (2) nsStyleContext::Destroy, (3) nsComputedDOMStyle::GetWidth, (4) the xslt_attributeset_ImportSameName.html test case for the XSLT stylesheet compiler, (5) nsXULDocument::SynchronizeBroadcastListener, (6) IsBindingAncestor, (7) PL_DHashTableOperate and nsEditor::EndUpdateViewBatch, and (8) gfxSkipCharsIterator::SetOffsets, and other vectors.
network
low complexity
mozilla CWE-399
5.0