Vulnerabilities > Resource Management Errors

DATE CVE VULNERABILITY TITLE RISK
2008-11-13 CVE-2008-5052 Resource Management Errors vulnerability in Mozilla Firefox, Seamonkey and Thunderbird
The AppendAttributeValue function in the JavaScript engine in Mozilla Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) via unknown vectors that trigger memory corruption, as demonstrated by e4x/extensions/regress-410192.js.
network
low complexity
mozilla CWE-399
critical
10.0
2008-11-13 CVE-2008-5018 Resource Management Errors vulnerability in multiple products
The JavaScript engine in Mozilla Firefox 3.x before 3.0.4, Firefox 2.x before 2.0.0.18, Thunderbird 2.x before 2.0.0.18, and SeaMonkey 1.x before 1.1.13 allows remote attackers to cause a denial of service (crash) via vectors related to "insufficient class checking" in the Date class.
network
low complexity
mozilla debian canonical CWE-399
critical
10.0
2008-11-13 CVE-2008-5013 Resource Management Errors vulnerability in Mozilla Firefox and Seamonkey
Mozilla Firefox 2.x before 2.0.0.18 and SeaMonkey 1.x before 1.1.13 do not properly check when the Flash module has been dynamically unloaded properly, which allows remote attackers to execute arbitrary code via a crafted SWF file that "dynamically unloads itself from an outside JavaScript function," which triggers an access of an expired memory address.
network
mozilla CWE-399
critical
9.3
2008-11-10 CVE-2008-5035 Resource Management Errors vulnerability in IBM Hardware Management Console 3.2.0/3.3.0
The Resource Monitoring and Control (RMC) daemon in IBM Hardware Management Console (HMC) 7 release 3.2.0 SP1 and 3.3.0 SP2 allows remote attackers to cause a denial of service (daemon crash or hang) via a packet with an invalid length.
network
low complexity
ibm CWE-399
5.0
2008-11-10 CVE-2008-5006 Resource Management Errors vulnerability in University of Washington Imap Toolkit 2007B
smtp.c in the c-client library in University of Washington IMAP Toolkit 2007b allows remote SMTP servers to cause a denial of service (NULL pointer dereference and application crash) by responding to the QUIT command with a close of the TCP connection instead of the expected 221 response code.
network
low complexity
university-of-washington CWE-399
5.0
2008-11-05 CVE-2008-4813 Resource Management Errors vulnerability in Adobe Acrobat and Acrobat Reader
Adobe Reader and Acrobat 8.1.2 and earlier, and before 7.1.1, allow remote attackers to execute arbitrary code via a crafted PDF document that (1) performs unspecified actions on a Collab object that trigger memory corruption, related to a GetCosObj method; or (2) contains a malformed PDF object that triggers memory corruption during parsing.
network
adobe CWE-399
critical
9.3
2008-11-01 CVE-2008-4869 Resource Management Errors vulnerability in Ffmpeg
FFmpeg 0.4.9, as used by MPlayer, allows context-dependent attackers to cause a denial of service (memory consumption) via unknown vectors, aka a "Tcp/udp memory leak."
network
low complexity
ffmpeg mplayer CWE-399
critical
10.0
2008-10-31 CVE-2008-4800 Resource Management Errors vulnerability in Microsoft Debug Diagnostic Tool
The DebugDiag ActiveX control in CrashHangExt.dll, possibly 1.0, in Microsoft Debug Diagnostic Tool allows remote attackers to cause a denial of service (NULL pointer dereference and Internet Explorer 6.0 crash) via a large negative integer argument to the GetEntryPointForThread method.
network
low complexity
microsoft CWE-399
5.0
2008-10-23 CVE-2008-3817 Resource Management Errors vulnerability in Cisco products
Memory leak in Cisco Adaptive Security Appliances (ASA) 5500 Series and PIX Security Appliances 8.0 before 8.0(4) and 8.1 before 8.1(2) allows remote attackers to cause a denial of service (memory consumption) via an unspecified sequence of packets, related to the "initialization code for the hardware crypto accelerator."
network
low complexity
cisco CWE-399
7.8
2008-10-22 CVE-2008-4685 Resource Management Errors vulnerability in Wireshark
Use-after-free vulnerability in the dissect_q931_cause_ie function in packet-q931.c in the Q.931 dissector in Wireshark 0.10.3 through 1.0.3 allows remote attackers to cause a denial of service (application crash or abort) via certain packets that trigger an exception.
network
low complexity
wireshark CWE-399
5.0