Vulnerabilities > Resource Management Errors

DATE CVE VULNERABILITY TITLE RISK
2008-07-10 CVE-2008-3134 Resource Management Errors vulnerability in Graphicsmagick
Multiple unspecified vulnerabilities in GraphicsMagick before 1.2.4 allow remote attackers to cause a denial of service (crash, infinite loop, or memory consumption) via (a) unspecified vectors in the (1) AVI, (2) AVS, (3) DCM, (4) EPT, (5) FITS, (6) MTV, (7) PALM, (8) RLA, and (9) TGA decoder readers; and (b) the GetImageCharacteristics function in magick/image.c, as reachable from a crafted (10) PNG, (11) JPEG, (12) BMP, or (13) TIFF file.
network
low complexity
graphicsmagick CWE-399
5.0
2008-07-09 CVE-2008-2244 Resource Management Errors vulnerability in Microsoft Office Word 2002
Microsoft Office Word 2002 SP3 allows remote attackers to execute arbitrary code via a .doc file that contains malformed data, as exploited in the wild in July 2008, and as demonstrated by attachement.doc.
network
microsoft CWE-399
critical
9.3
2008-07-07 CVE-2008-2811 Resource Management Errors vulnerability in Mozilla Firefox, Seamonkey and Thunderbird
The block reflow implementation in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an image whose display requires more pixels than nscoord_MAX, related to nsBlockFrame::DrainOverflowLines.
network
low complexity
mozilla CWE-399
critical
10.0
2008-07-07 CVE-2008-2799 Resource Management Errors vulnerability in Mozilla Firefox, Seamonkey and Thunderbird
Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via unknown vectors related to the JavaScript engine.
network
low complexity
mozilla CWE-399
critical
10.0
2008-07-07 CVE-2008-2798 Resource Management Errors vulnerability in Mozilla Firefox, Seamonkey and Thunderbird
Multiple unspecified vulnerabilities in Mozilla Firefox before 2.0.0.15, Thunderbird 2.0.0.14 and earlier, and SeaMonkey before 1.1.10 allow remote attackers to cause a denial of service (application crash) and possibly execute arbitrary code via unknown vectors related to the layout engine.
network
low complexity
mozilla CWE-399
critical
10.0
2008-07-07 CVE-2008-3052 Resource Management Errors vulnerability in Typo3 SQL Frontend Extension
Unspecified vulnerability in the SQL Frontend (mh_omsqlio) extension 1.0.11 and earlier for TYPO3 allows remote attackers to cause a denial of service via unknown vectors.
network
low complexity
typo3 CWE-399
7.5
2008-07-07 CVE-2008-3050 Resource Management Errors vulnerability in Typo3 PDF Generator 2 Extension
Unspecified vulnerability in the PDF Generator 2 (pdf_generator2) extension 0.5.0 and earlier for TYPO3 allows attackers to cause a denial of service via unspecified vectors.
network
low complexity
typo3 CWE-399
5.0
2008-06-30 CVE-2008-2946 Resource Management Errors vulnerability in SUN Solaris and Sunos
The SNMP-DMI mapper subagent daemon (aka snmpXdmid) in Solstice Enterprise Agents in Sun Solaris 8 through 10 allows remote attackers to cause a denial of service (daemon crash) via malformed packets.
network
low complexity
sun CWE-399
7.8
2008-06-30 CVE-2008-2943 Resource Management Errors vulnerability in IBM Tivoli Directory Server
Double free vulnerability in IBM Tivoli Directory Server (TDS) 6.1.0.0 through 6.1.0.15 allows remote authenticated administrators to cause a denial of service (ABEND) and possibly execute arbitrary code by using ldapadd to attempt to create a duplicate ibm-globalAdminGroup LDAP database entry.
network
ibm CWE-399
6.0
2008-06-24 CVE-2008-2664 Resource Management Errors vulnerability in multiple products
The rb_str_format function in Ruby 1.8.4 and earlier, 1.8.5 before 1.8.5-p231, 1.8.6 before 1.8.6-p230, 1.8.7 before 1.8.7-p22, and 1.9.0 before 1.9.0-2 allows context-dependent attackers to trigger memory corruption via unspecified vectors related to alloca, a different issue than CVE-2008-2662, CVE-2008-2663, and CVE-2008-2725.
network
low complexity
ruby-lang debian canonical CWE-399
7.8