Vulnerabilities > Resource Management Errors

DATE CVE VULNERABILITY TITLE RISK
2007-09-18 CVE-2007-4941 Resource Management Errors vulnerability in KDE Kmplayer
KMPlayer 2.9.3.1210 and earlier allows remote attackers to cause a denial of service (CPU consumption) via a .avi file with certain large "indx truck size" and nEntriesInuse values.
network
kde CWE-399
7.1
2007-09-14 CVE-2007-4897 Resource Management Errors vulnerability in Ekiga 2.0.5
pwlib, as used by Ekiga 2.0.5 and possibly other products, allows remote attackers to cause a denial of service (application crash) via a long argument to the PString::vsprintf function, related to a "memory management flaw".
network
low complexity
ekiga CWE-399
5.0
2007-09-04 CVE-2007-4660 Resource Management Errors vulnerability in PHP
Unspecified vulnerability in the chunk_split function in PHP before 5.2.4 has unknown impact and attack vectors, related to an incorrect size calculation.
network
low complexity
php CWE-399
7.5
2007-09-04 CVE-2007-4654 Resource Management Errors vulnerability in multiple products
Unspecified vulnerability in SSHield 1.6.1 with OpenSSH 3.0.2p1 on Cisco WebNS 8.20.0.1 on Cisco Content Services Switch (CSS) series 11000 devices allows remote attackers to cause a denial of service (connection slot exhaustion and device crash) via a series of large packets designed to exploit the SSH CRC32 attack detection overflow (CVE-2001-0144), possibly a related issue to CVE-2002-1024.
network
low complexity
cisco openbsd teamf1 CWE-399
5.0
2007-08-31 CVE-2007-4618 Resource Management Errors vulnerability in BEA Weblogic Server 6.0/6.1/7.0
Unspecified vulnerability in BEA WebLogic Server 6.1 Gold through SP7 and 7.0 Gold through SP7 allows remote attackers to cause a denial of service (disk consumption) via certain malformed HTTP headers.
network
low complexity
bea CWE-399
7.8
2007-08-31 CVE-2007-4617 Resource Management Errors vulnerability in BEA Weblogic Server
Unspecified vulnerability in BEA WebLogic Server 6.1 Gold through SP7, 7.0 Gold through SP7, and 8.1 Gold through SP4 allows remote attackers to cause a denial of service (server thread hang) via unspecified vectors.
network
low complexity
bea CWE-399
7.8
2007-08-28 CVE-2007-4577 Resource Management Errors vulnerability in Sophos Anti-Virus, Scanning Engine and Small Business Suite
Sophos Anti-Virus for Unix/Linux before 2.48.0 allows remote attackers to cause a denial of service (infinite loop) via a malformed BZip file that results in the creation of multiple Engine temporary files (aka a "BZip bomb").
network
low complexity
sophos CWE-399
7.8
2007-08-13 CVE-2007-3851 Resource Management Errors vulnerability in Linux Kernel
The drm/i915 component in the Linux kernel before 2.6.22.2, when used with i965G and later chipsets, allows local users with access to an X11 session and Direct Rendering Manager (DRM) to write to arbitrary memory locations and gain privileges via a crafted batchbuffer.
local
high complexity
linux intel CWE-399
6.0
2007-08-03 CVE-2007-4158 Resource Management Errors vulnerability in Tibco Rendezvous 7.5.2/7.5.3/7.5.4
Memory leak in TIBCO Rendezvous (RV) daemon (rvd) 7.5.2, 7.5.3 and 7.5.4 allows remote attackers to cause a denial of service (memory consumption) via a packet with a length field of zero, a different vulnerability than CVE-2006-2830.
network
low complexity
tibco CWE-399
7.8
2007-07-10 CVE-2007-1754 Resource Management Errors vulnerability in Microsoft Publisher 2007
PUBCONV.DLL in Microsoft Office Publisher 2007 does not properly clear memory when transferring data from disk to memory, which allows user-assisted remote attackers to execute arbitrary code via a malformed .pub page via a certain negative value, which bypasses a sanitization procedure that initializes critical pointers to NULL, aka the "Publisher Invalid Memory Reference Vulnerability".
network
microsoft CWE-399
critical
9.3