Vulnerabilities > Resource Management Errors

DATE CVE VULNERABILITY TITLE RISK
2009-02-10 CVE-2009-0096 Resource Management Errors vulnerability in Microsoft Visio 2002/2003/2007
Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 does not properly perform memory copy operations for object data, which allows remote attackers to execute arbitrary code via a crafted Visio document, aka "Memory Corruption Vulnerability."
network
microsoft CWE-399
critical
9.3
2009-02-10 CVE-2009-0095 Resource Management Errors vulnerability in Microsoft Visio 2002/2003/2007
Microsoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 does not properly validate object data in Visio files, which allows remote attackers to execute arbitrary code via a crafted file, aka "Memory Validation Vulnerability."
network
microsoft CWE-399
critical
9.3
2009-02-10 CVE-2009-0075 Resource Management Errors vulnerability in Microsoft Internet Explorer 7
Microsoft Internet Explorer 7 does not properly handle errors during attempted access to deleted objects, which allows remote attackers to execute arbitrary code via a crafted HTML document, related to CFunctionPointer and the appending of document objects, aka "Uninitialized Memory Corruption Vulnerability."
network
microsoft CWE-399
critical
9.3
2009-02-10 CVE-2008-6107 Resource Management Errors vulnerability in Linux Kernel
The (1) sys32_mremap function in arch/sparc64/kernel/sys_sparc32.c, the (2) sparc_mmap_check function in arch/sparc/kernel/sys_sparc.c, and the (3) sparc64_mmap_check function in arch/sparc64/kernel/sys_sparc.c, in the Linux kernel before 2.6.25.4, omit some virtual-address range (aka span) checks when the mremap MREMAP_FIXED bit is not set, which allows local users to cause a denial of service (panic) via unspecified mremap calls, a related issue to CVE-2008-2137.
local
low complexity
linux CWE-399
4.9
2009-02-06 CVE-2002-2430 Resource Management Errors vulnerability in Goahead Webserver 2.0/2.1
GoAhead WebServer before 2.1.1 allows remote attackers to cause a denial of service (CPU consumption) by performing a socket disconnect to terminate a request before it has been fully processed by the server.
network
low complexity
goahead CWE-399
5.0
2009-02-06 CVE-2008-6082 Resource Management Errors vulnerability in Southrivertech Titan FTP Server 6.26
Titan FTP Server 6.26 build 630 allows remote attackers to cause a denial of service (CPU consumption) via the SITE WHO command.
network
low complexity
southrivertech CWE-399
5.0
2009-02-04 CVE-2009-0353 Resource Management Errors vulnerability in Mozilla Firefox, Seamonkey and Thunderbird
Unspecified vulnerability in Mozilla Firefox 3.x before 3.0.6, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allows remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the JavaScript engine.
network
low complexity
mozilla CWE-399
critical
10.0
2009-02-04 CVE-2009-0352 Resource Management Errors vulnerability in Mozilla Firefox, Seamonkey and Thunderbird
Multiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.6, Thunderbird before 2.0.0.21, and SeaMonkey before 1.1.15 allow remote attackers to cause a denial of service (memory corruption and application crash) or possibly execute arbitrary code via vectors related to the layout engine and destruction of arbitrary layout objects by the nsViewManager::Composite function.
network
low complexity
mozilla CWE-399
critical
10.0
2009-02-03 CVE-2009-0414 Resource Management Errors vulnerability in TOR
Unspecified vulnerability in Tor before 0.2.0.33 has unspecified impact and remote attack vectors that trigger heap corruption.
network
low complexity
tor CWE-399
critical
10.0
2009-02-02 CVE-2008-6024 Resource Management Errors vulnerability in SUN Opensolaris and Solaris
Unspecified vulnerability in the NFSv4 client module in the kernel on Sun Solaris 10 and OpenSolaris before snv_37, when automountd is used, allows user-assisted remote attackers to cause a denial of service (unresponsive NFS filesystems) via unknown vectors.
network
high complexity
sun CWE-399
5.4