Vulnerabilities > Resource Management Errors

DATE CVE VULNERABILITY TITLE RISK
2008-05-13 CVE-2008-1438 Resource Management Errors vulnerability in Microsoft products
Unspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) 1.1.3520.0 and 0.1.13.192, as used in multiple Microsoft products, allows context-dependent attackers to cause a denial of service (disk space exhaustion) via a file with "crafted data structures" that trigger the creation of large temporary files, a different vulnerability than CVE-2008-1437.
network
low complexity
microsoft CWE-399
5.0
2008-05-13 CVE-2008-1437 Resource Management Errors vulnerability in Microsoft products
Unspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) 1.1.3520.0 and 0.1.13.192, as used in multiple Microsoft products, allows context-dependent attackers to cause a denial of service (engine hang and restart) via a crafted file, a different vulnerability than CVE-2008-1438.
network
low complexity
microsoft CWE-399
5.0
2008-05-13 CVE-2008-1434 Resource Management Errors vulnerability in Microsoft products
Use-after-free vulnerability in Microsoft Word in Office 2000 and XP SP3, 2003 SP2 and SP3, and 2007 Office System SP1 and earlier allows remote attackers to execute arbitrary code via an HTML document with a large number of Cascading Style Sheets (CSS) selectors, related to a "memory handling error" that triggers memory corruption.
network
microsoft CWE-399
critical
9.3
2008-05-08 CVE-2008-1615 Resource Management Errors vulnerability in Redhat Enterprise Linux and Enterprise Linux Desktop
Linux kernel 2.6.18, and possibly other versions, when running on AMD64 architectures, allows local users to cause a denial of service (crash) via certain ptrace calls.
local
low complexity
redhat amd CWE-399
4.9
2008-05-08 CVE-2007-5498 Resource Management Errors vulnerability in Linux Kernel 2.6.18
The Xen hypervisor block backend driver for Linux kernel 2.6.18, when running on a 64-bit host with a 32-bit paravirtualized guest, allows local privileged users in the guest OS to cause a denial of service (host OS crash) via a request that specifies a large number of blocks.
local
low complexity
linux CWE-399
4.9
2008-05-08 CVE-2007-5001 Resource Management Errors vulnerability in Redhat Enterprise Linux and Enterprise Linux Desktop
Linux kernel before 2.4.21 allows local users to cause a denial of service (kernel panic) via asynchronous input or output on a FIFO special file.
local
low complexity
redhat CWE-399
4.9
2008-05-07 CVE-2008-2111 Resource Management Errors vulnerability in Yahoo Assistant
The ActiveX Control (yNotifier.dll) in Yahoo! Assistant 3.6 and earlier allows remote attackers to execute arbitrary code via unspecified vectors in the Ynoifier COM object that trigger memory corruption.
network
yahoo CWE-399
critical
9.3
2008-05-06 CVE-2008-2092 Resource Management Errors vulnerability in Linksys Spa-2102 Phone Adapter 3.3.6
Linksys SPA-2102 Phone Adapter 3.3.6 allows remote attackers to cause a denial of service (crash) via a long ping packet ("ping of death").
network
low complexity
linksys CWE-399
7.8
2008-05-06 CVE-2008-2090 Resource Management Errors vulnerability in SUN Solaris 10
Unspecified vulnerability in the SCTP protocol implementation in Sun Solaris 10 allows remote attackers to cause a denial of service (CPU consumption and network traffic amplification) via a crafted SCTP packet.
network
low complexity
sun CWE-399
7.8
2008-05-06 CVE-2008-2005 Resource Management Errors vulnerability in Wonderware Intouch and Suitelink
The SuiteLink Service (aka slssvc.exe) in WonderWare SuiteLink before 2.0 Patch 01, as used in WonderWare InTouch 8.0, allows remote attackers to cause a denial of service (NULL pointer dereference and service shutdown) and possibly execute arbitrary code via a large length value in a Registration packet to TCP port 5413, which causes a memory allocation failure.
network
low complexity
wonderware CWE-399
5.0