Unspecified vulnerability in Interchange before 5.6.0 and before 5.5.2 allows remote attackers to cause a denial of service via crafted HTTP requests. NOTE: this might overlap CVE-2007-2635.


Novell GroupWise Messenger (GWIM) before 2.0.3 Hot Patch 1 allows remote attackers to cause a denial of service (crash) via a long user ID possibly involving a popup alert. NOTE: it is not clear whether this issue crosses privilege boundaries.


The FTP service in Acritum Femitter Server 1.03 allows remote attackers to cause a denial of service (crash) by sending multiple crafted RETR commands. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


The HTTP server in Cisco Adaptive Security Appliance (ASA) 5500 devices 8.0 before 8.0(3)15 and 8.1 before 8.1(1)5 when configured as a clientless SSL VPN endpoint does not properly process URIs which allows remote attackers to cause a denial of service (device reload) via a URI in a crafted SSL or HTTP packet aka Bug ID CSCsq19369.


The ooh323 channel driver in Asterisk Addons 1.2.x before 1.2.9 and Asterisk-Addons 1.4.x before 1.4.7 creates a remotely accessible TCP port that is intended solely for localhost communication and interprets some TCP application-data fields as addresses of memory to free which allows remote attackers to cause a denial of service (daemon crash) via crafted TCP packets.


The protocol_client_msg function in vnc.c in the VNC server in (1) Qemu 0.9.1 and earlier and (2) KVM kvm-79 and earlier allows remote attackers to cause a denial of service (infinite loop) via a certain message.


Asterisk Open Source 1.0.x and 1.2.x before 1.2.29 and Business Edition A.x.x and B.x.x before B.2.5.3 when pedantic parsing (aka pedanticsipchecking) is enabled allows remote attackers to cause a denial of service (daemon crash) via a SIP INVITE message that lacks a From header related to invocations of the ast_uri_decode function and improper handling of (1) an empty const string and (2) a NULL pointer.


Unspecified vulnerability in the SSH server in (1) Cisco Service Control Engine (SCE) 3.0.x before 3.0.7 and 3.1.x before 3.1.0 and (2) Icon Labs Iconfidant SSH before 2.3.8 allows remote attackers to cause a denial of service (management interface outage) via SSH traffic that occurs during management operations and triggers \illegal I/O operations \ aka Bug ID CSCsh49563.


Apple Safari might allow remote attackers to obtain potentially sensitive memory contents or cause a denial of service (crash) via a crafted (1) bitmap (BMP) or (2) GIF file a related issue to CVE-2008-0420.


SAPLPD 6.28 and earlier included in SAP GUI 7.10 and SAPSprint before 1018 allows remote attackers to cause a denial of service (crash) via a 0x53 LPD command which causes the server to terminate.


PRO-Search 0.17 and earlier allows remote attackers to cause a denial of service via certain values of the show_page and time parameters to the default URI.


The bdecode_recursive function in include/libtorrent/bencode.hpp in Rasterbar Software libtorrent before 0.12.1 as used in Deluge before 0.5.8.3 and other products allows context-dependent attackers to cause a denial of service (stack exhaustion and crash) via a crafted bencoded message.


Unspecified vulnerability in Hitachi EUR Print Manager and related Client and Local Server products 05-06 through 05-06-/B and 05-08 allows remote attackers to cause a denial of service (service hang or termination) via unspecified vectors related to \unexpected data.\


Cisco Unified IP Phone 7940 7940G 7960 and 7960G running SCCP firmware allows remote attackers to cause a denial of service (reboot) via a long ICMP echo request (ping) packet.


The XML parsing code in Sun Java Runtime Environment JDK and JRE 6 Update 3 and earlier processes external entity references even when the \external general entities\ property is false which allows remote attackers to conduct XML external entity (XXE) attacks and cause a denial of service or access restricted resources.


Unspecified vulnerability in Lotus Domino 7.0.2 before Fix Pack 3 allows attackers to cause a denial of service via unknown vectors.


Double-Take 5.0.0.2865 and earlier distributed under the HP StorageWorks Storage Mirroring name and other names allows remote attackers to cause a denial of service (daemon crash) via a certain long packet that triggers an attempt to allocate a large amount of memory.


lighttpd 1.4.18 and possibly other versions before 1.5.0 does not properly calculate the size of a file descriptor array which allows remote attackers to cause a denial of service (crash) via a large number of connections which triggers an out-of-bounds access.


Unspecified vulnerability in Cisco PIX 500 Series Security Appliance and 5500 Series Adaptive Security Appliance (ASA) before 7.2(3)6 and 8.0(3) when the Time-to-Live (TTL) decrement feature is enabled allows remote attackers to cause a denial of service (device reload) via a crafted IP packet.


ipdsserver.exe in Intermate WinIPDS 3.3 G52-33-021 allows remote attackers to cause a denial of service (CPU consumption) via short packets on TCP port 5001 with the 3 5 7 13 14 or 15 packet types.


Pragma FortressSSH 5.0 Build 4 Revision 293 and earlier handles long input to sshd.exe by creating an error-message window and waiting for the administrator to click in this window before terminating the sshd.exe process which allows remote attackers to cause a denial of service (connection slot exhaustion) via a flood of SSH connections with long data objects as demonstrated by (1) a long list of keys and (2) a long username.


The process_chat_input function in TinTin++ 1.97.9 and WinTin++ 1.97.9 allows remote attackers to cause a denial of service (application crash) via a YES message without a newline character which triggers a NULL dereference.


Unspecified vulnerability in the Supervisor Engine 32 (Sup32) Supervisor Engine 720 (Sup720) and Route Switch Processor 720 (RSP720) for multiple Cisco products when using Multi Protocol Label Switching (MPLS) VPN and OSPF sham-link allows remote attackers to cause a denial of service (blocked queue device restart or memory leak) via unknown vectors.


The Logging Server (ftplogsrv.exe) 7.9.14.0 and earlier in IPSwitch WS_FTP 6.1 allows remote attackers to cause a denial of service (loss of responsiveness) via a large number of large packets to port 5151/udp which causes the listening socket to terminate and prevents log commands from being recorded a different vulnerability than CVE-2007-3823.


The SIP module in Ingate Firewall before 4.6.1 and SIParator before 4.6.1 does not reuse SIP media ports in unspecified call hold and send-only stream scenarios which allows remote attackers to cause a denial of service (port exhaustion) via unspecified vectors.


regex/v4/perl_matcher_non_recursive.hpp in the Boost regex library (aka Boost.Regex) in Boost 1.33 and 1.34 allows context-dependent attackers to cause a denial of service (failed assertion and crash) via an invalid regular expression.


ExtremeZ-IP.exe in ExtremeZ-IP File and Print Server 5.1.2x15 and earlier allows remote attackers to cause a denial of service (daemon crash) via an invalid UAM field in a request to the Apple Filing Protocol (AFP) service on TCP port 548.


Double free vulnerability in OpenSSL 0.9.8f and 0.9.8g when the TLS server name extensions are enabled allows remote attackers to cause a denial of service (crash) via a malformed Client Hello packet. NOTE: some of these details are obtained from third party information.


MaraDNS 1.0 before 1.0.41 1.2 before 1.2.12.08 and 1.3 before 1.3.07.04 allows remote attackers to cause a denial of service via a crafted DNS packet that prevents an authoritative name (CNAME) record from resolving aka \improper rotation of resource records.\


Unspecified vulnerability in Active Directory on Microsoft Windows 2000 and Windows Server 2003 and Active Directory Application Mode (ADAM) on XP and Server 2003 allows remote attackers to cause a denial of service (hang and restart) via a crafted LDAP request.


KHTML WebKit as used in Apple Safari 2.x allows remote attackers to cause a denial of service (browser crash) via a crafted web page possibly involving a STYLE attribute of a DIV element.


dhost.exe in Novell eDirectory 8.7.3 before sp10 and 8.8.2 allows remote attackers to cause a denial of service (CPU consumption) via an HTTP request with (1) multiple Connection headers or (2) a Connection header with multiple comma-separated values. NOTE: this might be similar to CVE-2008-1777.


The replace_inline_img function in elogd in Electronic Logbook (ELOG) before 2.7.1 allows remote attackers to cause a denial of service (infinite loop) via crafted logbook entries. NOTE: some of these details are obtained from third party information.


Mobile Safari on Apple iPhone 1.1.2 and 1.1.3 allows remote attackers to cause a denial of service (memory exhaustion and device crash) via certain JavaScript code that constructs a long string and an array containing long string elements possibly a related issue to CVE-2006-3677. NOTE: some of these details are obtained from third party information.


Double-Take 5.0.0.2865 and earlier distributed under the HP StorageWorks Storage Mirroring name and other names allows remote attackers to cause a denial of service (daemon termination) via (1) a large vector<T> value which raises a \vector<T> too long\ exception; or (2) a certain packet that raises an ospace/time/src\\date.cpp exception.


Format string vulnerability in the logging function in the IM Server (aka IMserve or IMserver) in Ipswitch Instant Messaging (IM) 2.0.8.1 and earlier allows remote authenticated users to cause a denial of service (daemon crash) and possibly have unspecified other impact via format string specifiers in an IP address field.


Unspecified vulnerability in the SSH server in (1) Cisco Service Control Engine (SCE) before 3.1.6 and (2) Icon Labs Iconfidant SSH before 2.3.8 allows remote attackers to cause a denial of service (device instability) via \SSH credentials that attempt to change the authentication method \ aka Bug ID CSCsm14239.


The ipcomp6_input function in sys/netinet6/ipcomp_input.c in the KAME project before 20071201 does not properly check the return value of the m_pulldown function which allows remote attackers to cause a denial of service (system crash) via an IPv6 packet with an IPComp header.


The Web UI interface in (1) BitTorrent before 6.0.3 build 8642 and (2) uTorrent before 1.8beta build 10524 allows remote attackers to cause a denial of service (application crash) via an HTTP request with a malformed Range header.


The Linux kernel 2.6.20 through 2.6.21.1 allows remote attackers to cause a denial of service (panic) via a certain IPv6 packet possibly involving the Jumbo Payload hop-by-hop option (jumbogram).


Open System Consultants (OSC) Radiator before 4.0 allows remote attackers to cause a denial of service (daemon crash) via malformed RADIUS requests as demonstrated by packets sent by nmap.


HTTP File Server (HFS) before 2.2c when account names are used as log filenames allows remote attackers to cause a denial of service (daemon crash) via a long account name.


The SSH server in (1) Cisco Service Control Engine (SCE) before 3.1.6 and (2) Icon Labs Iconfidant SSH before 2.3.8 allows remote attackers to cause a denial of service (device restart or daemon outage) via a high rate of login attempts aka Bug ID CSCsi68582.


Memory leak in CUPS before 1.1.22 and possibly other versions allows remote attackers to cause a denial of service (memory consumption and daemon crash) via a large number of requests to add and remove shared printers.


notifyd in Apple Mac OS X 10.4.11 does not verify that Mach port death notifications have originated from the kernel which allows local users to cause a denial of service via spoofed death notifications that prevent other applications from receiving notifications.


Stack consumption vulnerability in Double-Take 5.0.0.2865 and earlier distributed under the HP StorageWorks Storage Mirroring name and other names allows remote attackers to cause a denial of service (daemon crash) via a certain packet that triggers the recursive calling of a function.


SNMPd in MikroTik RouterOS 3.2 and earlier allows remote attackers to cause a denial of service (daemon crash) via a crafted SNMP SET request.


slapd/back-bdb/modrdn.c in the BDB backend for slapd in OpenLDAP 2.3.39 allows remote authenticated users to cause a denial of service (daemon crash) via a modrdn operation with a NOOP (LDAP_X_NO_OPERATION) control a related issue to CVE-2007-6698.


The get_repeat_type function in basic_regex_creator.hpp in the Boost regex library (aka Boost.Regex) in Boost 1.33 and 1.34 allows context-dependent attackers to cause a denial of service (NULL dereference and crash) via an invalid regular expression.


Unspecified vulnerability in the embedded management console in HP iLO-2 Management Processors (iLO-2 MP) as used in Integrity Servers rx2660 rx3600 and rx6600 and Integrity Blade Server model bl860c allows remote attackers to cause a denial of service via unknown vectors.


Mozilla Firefox before 2.0.0.12 and SeaMonkey before 1.1.8 allows user-assisted remote attackers to cause a denial of service via a plain .txt file with a \Content-Disposition: attachment\ and an invalid \Content-Type: plain/text \ which prevents Firefox from rendering future plain text files within the browser.


Unspecified vulnerability in Funkwerk System Software before 7.4.1 PATCH 9 for certain Funkwerk Router / VPN devices allows remote attackers to cause a denial of service (panic and reboot) via unspecified DNS requests.


The Digital Photo Access Protocol (DPAP) server for iPhoto 4.0.3 allows remote attackers to cause a denial of service (crash) via a malformed dpap: URI a different vulnerability than CVE-2008-0043.


ovtopmd in HP OpenView Network Node Manager (OV NNM) 6.41 7.01 and 7.51 allows remote attackers to cause a denial of service (crash) via a crafted TCP request that triggers an out-of-bounds memory access.


The LPD server in cyan soft Opium OPI Server 4.10.1028 and earlier; cyanPrintIP Easy OPI Professional and Basic 4.10.1030 and earlier; Workstation 4.10.836 and earlier; and Standard 4.10.940 and earlier; allows remote attackers to cause a denial of service (daemon crash) via a connection that begins with (1) a \Send queue state\ LPD command 3 or (2) a \Send queue state\ LPD command 4.


ngIRCd 0.10.x before 0.10.4 and 0.11.0 before 0.11.0-pre2 allows remote attackers to cause a denial of service (crash) via crafted IRC PART message which triggers an invalid dereference.


Symantec Decomposer as used in certain Symantec antivirus products including Symantec Scan Engine 5.1.2 and other versions before 5.1.6.31 allows remote attackers to cause a denial of service (memory consumption) via a malformed RAR file to the Internet Content Adaptation Protocol (ICAP) port (1344/tcp).


Double-Take 5.0.0.2865 and earlier distributed under the HP StorageWorks Storage Mirroring name and other names allows remote attackers to cause a denial of service (CPU consumption) via a -1 value in the field that specifies the size of the vector<T> value.


Foundation in Apple Mac OS X 10.4.11 creates world-writable directories while NSFileManager copies files recursively and only modifies the permissions afterward which allows local users to modify copied files to cause a denial of service and possibly gain privileges.


Ipswitch Instant Messaging (IM) 2.0.8.1 and earlier allows remote attackers to cause a denial of service (NULL dereference and application crash) via a version field containing zero.


Sophos Anti-Virus 7.0.5 and other 7.x versions when Runtime Behavioural Analysis is enabled allows local users to cause a denial of service (reboot with the product disabled) and possibly gain privileges via a zero value in a certain length field in the ObjectAttributes argument to the NtCreateKey hooked System Service Descriptor Table (SSDT) function.


Uncontrolled array index in IBM solidDB 06.00.1018 and earlier allows remote attackers to cause a denial of service (daemon crash) via a large value in a certain 32-bit field.


Memory leak in Cisco Content Switching Module (CSM) 4.2(3) up to 4.2(8) and Cisco Content Switching Module with SSL (CSM-S) 2.1(2) up to 2.1(7) allows remote attackers to cause a denial of service (memory consumption) via TCP segments with an unspecified combination of TCP flags.


The virtual private dial-up network (VPDN) component in Cisco IOS before 12.3 allows remote attackers to cause a denial of service (resource exhaustion) via a series of PPTP sessions related to the persistence of interface descriptor block (IDB) data structures after process termination aka bug ID CSCdv59309.


Unspecified vulnerability in the floating point context switch implementation in Sun Solaris 9 and 10 on x86 platforms might allow local users to cause a denial of service (application exit) corrupt data or trigger incorrect calculations via unknown vectors.


The JavaScript engine in Mozilla Firefox before 2.0.0.14 Thunderbird before 2.0.0.14 and SeaMonkey before 1.1.10 allows remote attackers to cause a denial of service (garbage collector crash) and possibly have other impacts via a crafted web page. NOTE: this is due to an incorrect fix for CVE-2008-1237.


The File Check Utility (fcheck.exe) in ASG-Sentry Network Manager 7.0.0 and earlier allows remote attackers to cause a denial of service (CPU consumption) or overwrite arbitrary files via a query string that specifies the -b option probably due to an argument injection vulnerability.


Secure Internet Live Conferencing (SILC) Server before 1.1.1 allows remote attackers to cause a denial of service (daemon crash) via a NEW_CLIENT packet without a nickname.


FrameworkService.exe in McAfee Common Management Agent (CMA) 3.6.0.574 Patch 3 and earlier as used by ePolicy Orchestrator (ePO) and ProtectionPilot (PrP) allows remote attackers to corrupt memory and cause a denial of service (CMA Framework service crash) via a long invalid method in requests for the /spin//AVClient//AVClient.csp URI a different vulnerability than CVE-2006-5274.


libclamunrar in ClamAV before 0.93 allows remote attackers to cause a denial of service (crash) via crafted RAR files that trigger \memory problems \ as demonstrated by the PROTOS GENOME test suite for Archive Formats.


ovalarmsrv in HP OpenView Network Node Manager (OV NNM) 7.51 7.53 and possibly other versions allows remote attackers to cause a denial of service (hang) via certain requests that do not provide all required arguments.


The SIP Proxy (SIPD) service in Cisco Unified Presence before 6.0(3) allows remote attackers to cause a denial of service (core dump and service interruption) via a TCP port scan aka Bug ID CSCsj64533.


The Presence Engine (PE) service in Cisco Unified Presence before 6.0(1) allows remote attackers to cause a denial of service (core dump and service interruption) via malformed packets aka Bug ID CSCsh50164.


The Siemens SpeedStream 6520 router allows remote attackers to cause a denial of service (web interface crash) via an HTTP request to basehelp_English.htm with a large integer in the Content-Length field.


Unspecified vulnerability in SmarterMail Web Server (SMWebSvr.exe) in SmarterMail 5.0.2999 allows remote attackers to cause a denial of service (service termination) via a long HTTP (1) GET (2) HEAD (3) PUT (4) POST or (5) TRACE request. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


The kernel in IBM AIX 5.2 and 5.3 does not properly handle resizing JFS2 filesystems on concurrent volume groups spread across multiple nodes which allows local users of one node to cause a denial of service (remote node crash) by using chfs or lreducelv to reduce a filesystem's size.


Unspecified vulnerability in the DHCP service in VMware Workstation 5.5.x before 5.5.6 VMware Player 1.0.x before 1.0.6 VMware ACE 1.0.x before 1.0.5 VMware Server 1.0.x before 1.0.5 and VMware Fusion 1.1.x before 1.1.1 allows attackers to cause a denial of service.


The instant message service in Timbuktu Pro 8.6.5 RC 229 and earlier for Windows allows remote attackers to cause (1) a denial of service (daemon crash) via an invalid Version field or (2) a denial of service (CPU consumption and daemon termination) via an invalid or partial message.


The Certificate Authority Proxy Function (CAPF) service in Cisco Unified Communications Manager (CUCM) 4.1 before 4.1(3)SR7 4.2 before 4.2(3)SR4 and 4.3 before 4.3(2) allows remote attackers to cause a denial of service (service crash) via malformed network traffic aka Bug ID CSCsk46770.


The backend for XenSource Xen Para Virtualized Frame Buffer (PVFB) in Xen ioemu does not properly restrict the frame buffer size which allows attackers to cause a denial of service (crash) by mapping an arbitrary amount of guest memory.


The TFTP dissector in Wireshark (formerly Ethereal) 0.6.0 through 0.99.7 when running on Ubuntu 7.10 allows remote attackers to cause a denial of service (crash or memory consumption) via a malformed packet possibly related to a Cairo library bug.


libclamav/chmunpack.c in the chm-parser in ClamAV before 0.94 allows remote attackers to cause a denial of service (application crash) via a malformed CHM file related to an \invalid memory access.\


Memory leak in DLMFENC.sys 1.0.0.26 in DESlock+ 3.2.6 and earlier allows local users to cause a denial of service (kernel memory consumption) via a series of DLMFENC_IOCTL requests to \\\\.\\DLKPFSD_Device that allocate \link list structures.\


Perlbal before 1.70 when buffered upload is enabled allows remote attackers to cause a denial of service (crash) via a zero-byte chunked upload.


MailServer.exe in NoticeWare Email Server 4.6.1.0 allows remote attackers to cause a denial of service (application crash) via a long string to IMAP port (143/tcp).


licq before 1.3.6 allows remote attackers to cause a denial of service (file-descriptor exhaustion and application crash) via a large number of connections.


The Presence Engine (PE) service in Cisco Unified Presence before 6.0(1) allows remote attackers to cause a denial of service (core dump and service interruption) via an unspecified \stress test \ aka Bug ID CSCsh20972.


Multiple unspecified vulnerabilities in Wireshark (formerly Ethereal) 0.99.5 through 0.99.8 allow remote attackers to cause a denial of service (application crash) via a malformed packet to the (1) X.509sat or (2) Roofnet dissectors. NOTE: Vector 2 might also lead to a hang.


The Perforce service (p4s.exe) in Perforce Server 2007.3/143793 and earlier allows remote attackers to cause a denial of service (daemon crash) via a (1) server-DiffFile or (2) server-ReleaseFile command with a large integer value which is used in an array initialization calculation and leads to invalid memory access.


Unspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) 1.1.3520.0 and 0.1.13.192 as used in multiple Microsoft products allows context-dependent attackers to cause a denial of service (disk space exhaustion) via a file with \crafted data structures\ that trigger the creation of large temporary files a different vulnerability than CVE-2008-1437.


Comodo Firewall Pro before 3.0 does not properly validate certain parameters to hooked System Service Descriptor Table (SSDT) functions which allows local users to cause a denial of service (system crash) via (1) a crafted OBJECT_ATTRIBUTES structure in a call to the NtDeleteFile function which leads to improper validation of a ZwQueryObject result; and unspecified calls to the (2) NtCreateFile and (3) NtSetThreadContext functions different vectors than CVE-2007-0709.


The ssm_i emulation in Xen 5.1 on IA64 architectures allows attackers to cause a denial of service (dom0 panic) via certain traffic as demonstrated using an FTP stress test tool.


InterVideo IMC Server (aka IMCSvr.exe) and InterVideo Home Theater (aka IHT.exe) in InterVideo WinDVD Media Center 2.11.15.0 allow remote attackers to cause a denial of service (NULL dereference and application crash) via a crafted packet with two CRLF sequences. NOTE: the provenance of this information is unknown; the details are obtained solely from third party information.


Cisco Unified Communications Manager 4.1 before 4.1(3)SR7 4.2 before 4.2(3)SR4 4.3 before 4.3(2) 5.x before 5.1(3) and 6.x before 6.1(1) does not properly validate SIP URLs which allows remote attackers to cause a denial of service (service interruption) via a SIP INVITE message aka Bug ID CSCsl22355.


Memory leak in the virtual private dial-up network (VPDN) component in Cisco IOS before 12.3 allows remote attackers to cause a denial of service (memory consumption) via a series of PPTP sessions related to \dead memory\ that remains allocated after process termination aka bug ID CSCsj58566.


Sun Solaris 8 9 and 10 allows \remote privileged\ users to cause a denial of service (panic) via unknown vectors related to self encapsulated IP packets.


Unspecified vulnerability in the TFTP server in PacketTrap Networks pt360 Tool Suite 1.1.33.1.0 and other versions before 2.0.3900.0 allows remote attackers to cause a denial of service (daemon crash) via a long TFTP packet a different vulnerability than CVE-2008-1311.


The ip6_check_rh0hdr function in netinet6/ip6_input.c in OpenBSD 4.2 allows attackers to cause a denial of service (panic) via malformed IPv6 routing headers.


snomControl.swf in the central phone server for the Snom 320 SIP Phone allows remote attackers to cause a denial of service (application crash and corruption of call logs) via a \'); (double quote quote close parenthesis semicolon) sequence in the \Call a number\ field.


The eDirectory Host Environment service (dhost.exe) in Novell eDirectory 8.8.2 allows remote attackers to cause a denial of service (CPU consumption) via a long HTTP HEAD request to TCP port 8028.


The SCTP dissector in Wireshark (formerly Ethereal) 0.99.5 through 0.99.7 allows remote attackers to cause a denial of service (crash) via a malformed packet.


Check Point VPN-1 Power/UTM with NGX R60 through R65 and NG AI R55 software allows remote authenticated users to cause a denial of service (site-to-site VPN tunnel outage) and possibly intercept network traffic by configuring the local RFC1918 IP address to be the same as one of this tunnel's endpoint RFC1918 IP addresses and then using SecuRemote to connect to a network interface at the other endpoint.


The SNMP Trap Agent service in Cisco Unified Communications Manager (CUCM) 4.1 before 4.1(3)SR6 4.2 before 4.2(3)SR3 4.3 before 4.3(2) 5.x before 5.1(3) and 6.x before 6.1(1) allows remote attackers to cause a denial of service (core dump and service restart) via a series of malformed UDP packets as demonstrated by the IP Stack Integrity Checker (ISIC) aka Bug ID CSCsj24113.


VMware Workstation 6.0.x before 6.0.3 and 5.5.x before 5.5.6 VMware Player 2.0.x before 2.0.3 and 1.0.x before 1.0.6 VMware ACE 2.0.x before 2.0.1 and 1.0.x before 1.0.5 and VMware Server 1.0.x before 1.0.5 on Windows allow local users to gain privileges or cause a denial of service by impersonating the authd process through an unspecified use of an \insecurely created named pipe \ a different vulnerability than CVE-2008-1361.


The send_user_mode function in s_user.c in (1) Undernet ircu 2.10.12.12 and earlier (2) snircd 1.3.4 and earlier and unspecified other ircu derivatives allows remote attackers to cause a denial of service (daemon crash) via a malformed MODE command.


zabbix_agentd in ZABBIX 1.4.4 allows remote attackers to cause a denial of service (CPU and connection consumption) via multiple vfs.file.cksum commands with a special device node such as /dev/urandom or /dev/zero.


The \decode as\ feature in packet-bssap.c in the SCCP dissector in Wireshark (formerly Ethereal) 0.99.6 through 0.99.8 allows remote attackers to cause a denial of service (application crash) via a malformed packet.


Memory leak in the Certificate Trust List (CTL) Provider service in Cisco Unified Communications Manager (CUCM) 5.x before 5.1(3) allows remote attackers to cause a denial of service (memory consumption and service interruption) via a series of malformed TCP packets as demonstrated by TCPFUZZ aka Bug ID CSCsj80609.


Rising Antivirus 2008 before 20.38.20 allows local users to cause a denial of service (system crash) via an invalid pointer to the _CLIENT_ID structure in a call to the NtOpenProcess hooked System Service Descriptor Table (SSDT) function.


Interpretation conflict in PHP Toolkit before 1.0.1 on Gentoo Linux might allow local users to cause a denial of service (PHP outage) and read contents of PHP scripts by creating a file with a one-letter lowercase alphabetic name which triggers interpretation of a certain unquoted a-z argument as a matching shell glob for this name rather than interpretation as the literal a-z regular-expression string and consequently blocks the launch of the PHP interpreter within the Apache HTTP Server.


Comix 3.6.4 creates temporary directories with predictable names which allows local users to cause an unspecified denial of service.


Microsoft Windows XP SP2 and SP3 and Server 2003 SP1 and SP2 does not properly validate the option length field in Pragmatic General Multicast (PGM) packets which allows remote attackers to cause a denial of service (infinite loop and system hang) via a crafted PGM packet aka the \PGM Invalid Length Vulnerability.\


servlet/MIMEReceiveServlet in the web controller for Mitsubishi Electric GB-50 and GB-50A air-conditioning control systems allows remote attackers to cause a denial of service (air-conditioning outage) via an XML document containing a setRequest command.


rpc.metad in Sun Solaris 10 allows remote attackers to cause a denial of service (daemon crash) via a malformed RPC request.


Sympa before 5.4 allows remote attackers to cause a denial of service (daemon crash) via an e-mail message with a malformed value of the Content-Type header and unspecified other headers. NOTE: some of these details are obtained from third party information.


ClamAV before 0.93 allows remote attackers to cause a denial of service (CPU consumption) via a crafted ARJ archive as demonstrated by the PROTOS GENOME test suite for Archive Formats.


Unspecified vulnerability in the Internet Protocol (IP) implementation in Sun Solaris 8 9 and 10 allows remote attackers to bypass intended firewall policies or cause a denial of service (panic) via unknown vectors possibly related to ICMP packets and IP fragment reassembly.


Novell NetWare 6.5 allows attackers to cause a denial of service (ABEND) via a crafted Macintosh iPrint client request.


The eTrust Common Services (Transport) Daemon (eCSqdmn) in CA Secure Content Manager 8.0.28000.511 and earlier allows remote attackers to cause a denial of service (crash or CPU consumption) via a malformed packet to TCP port 1882.


cgi-bin/setup_virtualserver.exe on the Belkin F5D7230-4 router with firmware 9.01.10 allows remote attackers to cause a denial of service (control center outage) via an HTTP request with invalid POST data and a \Connection: Keep-Alive\ header.


The FxIAList service in ASG-Sentry Network Manager 7.0.0 and earlier does require authentication which allows remote attackers to cause a denial of service (service termination) via the exit command to TCP port 6162 or have other impacts via other commands.


ConnectionManagerImpl.java in Ignite Realtime Openfire 3.4.5 allows remote authenticated users to cause a denial of service (daemon outage) by triggering large outgoing queues without reading messages.


BitDefender Antivirus 2008 20080118 and earlier allows local users to cause a denial of service (system crash) via an invalid pointer to the CLIENT_ID structure in a call to the NtOpenProcess hooked System Service Descriptor Table (SSDT) function.


arch/s390/kernel/ptrace.c in Linux kernel 2.6.9 and other versions before 2.6.27-rc6 on s390 platforms allows local users to cause a denial of service (kernel panic) via the user-area-padding test from the ptrace testsuite in 31-bit mode which triggers an invalid dereference.


The IAX2 channel driver (chan_iax2) in Asterisk 1.2 before revision 72630 and 1.4 before revision 65679 when configured to allow unauthenticated calls sends \early audio\ to an unverified source IP address of a NEW message which allows remote attackers to cause a denial of service (traffic amplification) via a spoofed NEW message.


Unspecified vulnerability in Secure Computing Webwasher 5.30 before build 3159 and 6.3.0 before build 3150 allows remote attackers to cause a denial of service (freeze) via a crafted URL.


Microsoft Windows XP SP2 and SP3 Server 2003 SP1 and SP2 Vista Gold and SP1 and Server 2008 allows remote attackers to cause a denial of service (system hang) via a series of Pragmatic General Multicast (PGM) packets with invalid fragment options aka the \PGM Malformed Fragment Vulnerability.\


Stack consumption vulnerability in WebContainer.exe 1.0.0.336 and earlier in SLMail Pro 6.3.1.0 and earlier allows remote attackers to cause a denial of service (daemon crash) via a long request header in an HTTP request to TCP port 801. NOTE: some of these details are obtained from third party information.


Memory leak in the zlib_stateful_init function in crypto/comp/c_zlib.c in libssl in OpenSSL 0.9.8f through 0.9.8h allows remote attackers to cause a denial of service (memory consumption) via multiple calls as demonstrated by initial SSL client handshakes to the Apache HTTP Server mod_ssl that specify a compression algorithm.


Unspecified vulnerability in SLMail.exe in SLMail Pro 6.3.1.0 and earlier allows remote attackers to cause a denial of service (UDP service outage) via a large packet to UDP port 54. NOTE: some of these details are obtained from third party information.


The data-link switching (DLSw) component in Cisco IOS 12.0 through 12.4 allows remote attackers to cause a denial of service (device restart or memory consumption) via crafted (1) UDP port 2067 or (2) IP protocol 91 packets.


Active Directory on Microsoft Windows 2000 Server SP4 XP Professional SP2 and SP3 Server 2003 SP1 and SP2 and Server 2008 allows remote authenticated users to cause a denial of service (system hang or reboot) via a crafted LDAP request.


The Web TransferCtrl Class 8 2 1 4 (iManFile.cab) as used in WorkSite Web 8.2 before SP1 P2 allows remote attackers to cause a denial of service (memory consumption) via a large number of SendNrlLink directives which opens a separate window for each directive.


Unspecified vulnerability in libc on HP HP-UX B.11.23 and B.11.31 allows remote attackers to cause a denial of service via unknown vectors.


The Perforce service (p4s.exe) in Perforce Server 2007.3/143793 and earlier allows remote attackers to cause a denial of service (daemon crash) via a server-DiffFile command with an integer value within a certain range which causes a loop until all memory is exhausted.


The TFTP server in PacketTrap pt360 Tool Suite PRO 2.0.3901.0 and earlier allows remote attackers to cause a denial of service (daemon hang) by uploading a file named (1) '|' (pipe) (2) '\' (quotation mark) or (3) \<>\ (less than greater than); or (4) a file with a long name. NOTE: the issue for vector 4 might exist because of an incomplete fix for CVE-2008-1312.


Multiple unspecified vulnerabilities in the SMTP service in MailEnable Standard Edition 1.x Professional Edition 3.x and earlier and Enterprise Edition 3.x and earlier allow remote attackers to cause a denial of service (crash) via crafted (1) EXPN or (2) VRFY commands.


The tcp_respond function in netinet/tcp_subr.c in OpenBSD 4.1 and 4.2 allows attackers to cause a denial of service (panic) via crafted TCP packets. NOTE: some of these details are obtained from third party information.


The WPAR system call implementation in the kernel in IBM AIX 6.1 allows local users to cause a denial of service via unknown calls that trigger \undefined behavior.\


The _gnutls_recv_client_kx_message function in lib/gnutls_kx.c in libgnutls in gnutls-serv in GnuTLS before 2.2.4 continues to process Client Hello messages within a TLS message after one has already been processed which allows remote attackers to cause a denial of service (NULL dereference and crash) via a TLS message containing multiple Client Hello messages aka GNUTLS-SA-2008-1-2.


The arrayShrink function (lib/Array.c) in Squid 2.6.STABLE17 allows attackers to cause a denial of service (process exit) via unknown vectors that cause an array to shrink to 0 entries which triggers an assert error. NOTE: this issue is due to an incorrect fix for CVE-2007-6239.


Home FTP Server 1.4.5.89 allows remote attackers to cause a denial of service (crash) by opening a FTP passive mode connection then closing the original FTP connection. NOTE: some of these details are obtained from third party information.


MG-SOFT Net Inspector 6.5.0.828 and earlier for Windows allows remote attackers to cause a (1) denial of service (exception and crash) via a UDP packet to the SNMP Trap Service (MgWTrap3.exe) or (2) denial of service (device freeze or memory consumption) via a malformed request to the Net Inspector Server (niengine).


The SNMP dissector in Wireshark (formerly Ethereal) 0.99.6 through 0.99.7 allows remote attackers to cause a denial of service (crash) via a malformed packet.


Unspecified vulnerability in Cisco Unified Communications Manager 4.1 before 4.1(3)SR6 4.2 before 4.2(3)SR3 4.3 before 4.3(2) 5.x before 5.1(3) and 6.x before 6.1(1) allows remote attackers to cause a denial of service (CCM service restart) via an unspecified SIP INVITE message aka Bug ID CSCsk46944.


The IAX2 channel driver (chan_iax2) in Asterisk Open Source 1.0.x 1.2.x before 1.2.28 and 1.4.x before 1.4.19.1; Business Edition A.x.x B.x.x before B.2.5.2 and C.x.x before C.1.8.1; AsteriskNOW before 1.0.3; Appliance Developer Kit 0.x.x; and s800i before 1.1.0.3 when configured to allow unauthenticated calls does not verify that an ACK response contains a call number matching the server's reply to a NEW message which allows remote attackers to cause a denial of service (traffic amplification) via a spoofed ACK response that does not complete a 3-way handshake. NOTE: this issue exists because of an incomplete fix for CVE-2008-1923.


Multiple unspecified vulnerabilities in Fujitsu Interstage Smart Repository as used in multiple Fujitsu Interstage products allow remote attackers to cause a denial of service (daemon crash) via (1) an invalid request or (2) a large amount of data sent to the registered attribute value.


The connection_state_machine function (connections.c) in lighttpd 1.4.19 and earlier and 1.5.x before 1.5.0 allows remote attackers to cause a denial of service (active SSL connection loss) by triggering an SSL error such as disconnecting before a download has finished which causes all active SSL connections to be lost.


DLMFENC.sys 1.0.0.26 in DESlock+ 3.2.6 and earlier allows local users to cause a denial of service (system crash) via a certain ZERO_MEM DLMFENC_IOCTL request to \\\\.\\DLKPFSD_Device aka the \ring0 link list zero\ vulnerability.


The ovtopmd service in HP OpenView Network Node Manager (OV NNM) 7.51 7.53 and possibly other versions allows remote attackers to cause a denial of service (exit) by sending a 0x36 packet (exit request).


The LDAP dissector in Wireshark (formerly Ethereal) 0.99.2 through 0.99.8 allows remote attackers to cause a denial of service (application crash) via a malformed packet a different vulnerability than CVE-2006-5740.


IBM solidDB 06.00.1018 and earlier does not validate a certain field that specifies an amount of memory to allocate which allows remote attackers to cause a denial of service (daemon exit) via a packet with a large value in this field.


Memory leak in the Certificate Trust List (CTL) Provider service in Cisco Unified Communications Manager (CUCM) 5.x before 5.1(3) and 6.x before 6.1(1) allows remote attackers to cause a denial of service (memory consumption and service interruption) via a series of malformed TCP packets aka Bug ID CSCsi98433.


The Linksys WRT54G router allows remote attackers to cause a denial of service (device restart) via a long username and password to the FTP interface.


Unspecified vulnerability in Microsoft Malware Protection Engine (mpengine.dll) 1.1.3520.0 and 0.1.13.192 as used in multiple Microsoft products allows context-dependent attackers to cause a denial of service (engine hang and restart) via a crafted file a different vulnerability than CVE-2008-1438.


Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via web script that moves a (1) AUDIO element or (2) VIDEO element between windows.


The perf subsystem in the kernel package 2.6.32-122.el6.x86_64 in Red Hat Enterprise Linux (RHEL) 6 does not properly handle NMIs which might allow local users to cause a denial of service (excessive log messages) via unspecified vectors.


IBM Lotus Symphony 3 before FP3 allows remote attackers to cause a denial of service (application crash) via the sample .doc document that incorporates a user-defined toolbar.


The Cascading Style Sheets (CSS) implementation in Opera before 11.11 does not properly handle the column-count property which allows remote attackers to cause a denial of service (infinite repaint loop and application hang) via a web page as demonstrated by an unspecified Wikipedia page.


The GPU support functionality in Windows XP does not properly restrict rendering time which allows remote attackers to cause a denial of service (system crash) via vectors involving WebGL and (1) shader programs or (2) complex 3D geometry as demonstrated by using Mozilla Firefox or Google Chrome to visit the lots-of-polys-example.html test page in the Khronos WebGL SDK.


The International Components for Unicode (ICU) functionality in Google Chrome before 13.0.782.107 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an out-of-bounds write.


The ape_read_header function in ape.c in libavformat in FFmpeg before 0.5.4 as used in MPlayer VideoLAN VLC media player and other products allows remote attackers to cause a denial of service (application crash) via an APE (aka Monkey's Audio) file that contains a header but no frames.


LuaExpat before 1.2.0 does not properly detect recursion during entity expansion which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references a similar issue to CVE-2003-1564.


The server in ISC DHCP 3.x and 4.x before 4.2.2 3.1-ESV before 3.1-ESV-R3 and 4.1-ESV before 4.1-ESV-R3 allows remote attackers to cause a denial of service (daemon exit) via a crafted BOOTP packet.


The SmarterTools SmarterStats 6.0 web server does not properly validate string data that is intended for storage in an XML document which allows remote attackers to cause a denial of service (parsing error and daemon pause) via vectors involving (1) certain cookies in a SiteInfoLookup action to Admin/frmSites.aspx or certain (2) cookies or (3) parameters to (a) Client/frmViewOverviewReport.aspx (b) Client/frmViewReports.aspx or (c) Services/SiteAdmin.asmx as demonstrated by a >> string related to an \XML injection\ issue.


The Intel G41 driver 6.14.10.5355 on Windows XP SP3 allows remote attackers to cause a denial of service (system crash) via a crafted web page that is visited with Google Chrome or Mozilla Firefox as demonstrated by the lots-of-polys-example.html test page in the Khronos WebGL SDK.


The Cascading Style Sheets (CSS) implementation in Opera before 11.10 allows remote attackers to cause a denial of service (application crash) via vectors involving use of the :hover pseudo-class in conjunction with transforms for a floated element.


The eDocument Conversion Actions implementation in IBM Datacap Taskmaster Capture 8.0.1 FP1 and earlier allows remote attackers to cause a denial of service (batch abort) via a long subject line in an e-mail message that is represented in a .eml file.


Opera before 11.10 does not properly handle hidden animated GIF images which allows remote attackers to cause a denial of service (CPU consumption) via an image file that triggers continual repaints.


Unspecified vulnerability in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to cause a denial of service (daemon crash) via unknown vectors a different vulnerability than CVE-2011-2218.


The Performance Events subsystem in the Linux kernel before 3.1 does not properly handle event overflows associated with PERF_COUNT_SW_CPU_CLOCK events which allows local users to cause a denial of service (system hang) via a crafted application.


Unspecified vulnerability in the Service Advertisement Framework (SAF) in Cisco Unified Communications Manager (aka CUCM formerly CallManager) 8.x before 8.5(1) and Cisco Intercompany Media Engine 8.x before 8.5(1) allows remote attackers to cause a denial of service (device reload) via crafted SAF packets aka Bug ID CSCth19417.


The ext4_fill_super function in fs/ext4/super.c in the Linux kernel before 2.6.39 does not properly initialize a certain error-report data structure which allows local users to cause a denial of service (OOPS) by attempting to mount a crafted ext4 filesystem.


The \insert-blank-characters\ capability in caps.c in gnome-terminal (vte) before 0.28.1 allows remote authenticated users to cause a denial of service (CPU and memory consumption and crash) via a crafted file as demonstrated by a file containing the string \\\033100000000000000000@\.


The HTML parser in Google Chrome before 12.0.742.112 does not properly address \lifetime and re-entrancy issues \ which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.


The skb_gro_header_slow function in include/linux/netdevice.h in the Linux kernel before 2.6.39.4 when Generic Receive Offload (GRO) is enabled resets certain fields in incorrect situations which allows remote attackers to cause a denial of service (system crash) via crafted network traffic.


Prosody before 0.8.1 does not properly detect recursion during entity expansion which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references a similar issue to CVE-2003-1564.


The SVG implementation in Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via vectors involving a path on which many characters are drawn.


Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via a SELECT element that contains many OPTION elements.


The Packet Capture Service in Cisco Unified Communications Manager (aka CUCM formerly CallManager) 4.x does not properly handle idle TCP connections which allows remote attackers to cause a denial of service (memory consumption and restart) by making many connections aka Bug ID CSCtf97162.


The _dbus_header_byteswap function in dbus-marshal-header.c in D-Bus (aka DBus) 1.2.x before 1.2.28 1.4.x before 1.4.12 and 1.5.x before 1.5.4 does not properly handle a non-native byte order which allows local users to cause a denial of service (connection loss) obtain potentially sensitive information or conduct unspecified state-modification attacks via crafted messages.


Double free vulnerability in the tvb_uncompress function in epan/tvbuff.c in Wireshark 1.2.x before 1.2.17 and 1.4.x before 1.4.7 allows remote attackers to cause a denial of service (application crash) via a packet with malformed data that uses zlib compression.


Unspecified vulnerability in GroupWise Internet Agent (GWIA) in Novell GroupWise 8.0 before HP3 allows remote attackers to cause a denial of service (daemon crash) via unknown vectors a different vulnerability than CVE-2011-2219.


The Login component in IBM Rational DOORS Web Access 1.4.x before 1.4.0.4 allows remote authenticated users to cause a denial of service (license consumption) by trying to login to DOORS Web Access with a new user account that has never been used for a DOORS login.


Memory leak in Cisco IOS 12.4 15.0 and 15.1 Cisco IOS XE 2.5.x through 3.2.x and Cisco Unified Communications Manager (CUCM) 6.x and 7.x before 7.1(5b)su4 8.x before 8.5(1)su2 and 8.6 before 8.6(1) allows remote attackers to cause a denial of service (memory consumption and device reload or process failure) via a malformed SIP message aka Bug IDs CSCtl86047 and CSCto88686.


TCPUploadServer.exe in Progea Movicon 11.2 before Build 1084 does not require authentication for critical functions which allows remote attackers to obtain sensitive information delete files execute arbitrary programs or cause a denial of service (crash) via a crafted packet to TCP port 10651.


The befs_follow_link function in fs/befs/linuxvfs.c in the Linux kernel before 3.1-rc3 does not validate the length attribute of long symlinks which allows local users to cause a denial of service (incorrect pointer dereference and OOPS) by accessing a long symlink on a malformed Be filesystem.


The json.decode function in util/json.lua in Prosody 0.8.x before 0.8.1 might allow remote attackers to cause a denial of service (infinite loop) via invalid JSON data as demonstrated by truncated data.


IBM Lotus Symphony 3 before FP3 allows remote attackers to cause a denial of service (application hang) via complex graphics in a presentation.


Opera before 11.50 allows user-assisted remote attackers to cause a denial of service (application hang) via a large table which is not properly handled during a print preview.


AzeoTech DAQFactory before 5.85 (Build 1842) does not perform authentication for certain signals which allows remote attackers to cause a denial of service (system reboot or shutdown) via a signal.


The SIP process in Cisco Unified Communications Manager (aka CUCM formerly CallManager) 7.x before 7.1(5b)su4 and 8.x before 8.0(1) does not properly handle SDP data within a SIP call in certain situations related to use of the g729ar8 codec for a Media Termination Point (MTP) which allows remote attackers to cause a denial of service (service outage) via a crafted call aka Bug ID CSCtc61990.


The HP ProLiant SL Advanced Power Manager (SL-APM) with firmware before 1.20 does not properly validate users which allows remote attackers to cause a denial of service via unspecified vectors.


Google Chrome before 14.0.835.202 does not properly consider object lifetimes and thread safety during the handling of audio nodes which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.


Cisco Show and Share 5(2) 5.2(1) and 5.2(2) before 5.2(2.1) allows remote attackers to access the (1) Encoders and Pull Configurations (2) Push Configurations (3) Video Encoding Formats and (4) Transcoding administration pages and cause a denial of service (live event outage) or obtain potentially sensitive information via unspecified vectors aka Bug ID CSCto73758.


Adobe LiveCycle Data Services 3.1 and earlier LiveCycle 9.0.0.2 and earlier and BlazeDS 4.0.1 and earlier do not properly handle object graphs which allows attackers to cause a denial of service via unspecified vectors related to a \complex object graph vulnerability.\


Apache Tomcat 5.5.x before 5.5.34 6.x before 6.0.33 and 7.x before 7.0.19 when sendfile is enabled for the HTTP APR or HTTP NIO connector does not validate certain request attributes which allows local users to bypass intended file access restrictions or cause a denial of service (infinite loop or JVM crash) by leveraging an untrusted web application.


Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via a gradient with many stops related to the implementation of CANVAS elements SVG and Cascading Style Sheets (CSS).


Opera before 11.11 allows user-assisted remote attackers to cause a denial of service (application crash) via a crafted web page that is not properly handled during a reload occurring after the opening of a popup of the Easy Sticky Note extension.


The GPU support functionality in Mac OS X does not properly restrict rendering time which allows remote attackers to cause a denial of service (desktop hang) via vectors involving WebGL and (1) shader programs or (2) complex 3D geometry as demonstrated by using Mozilla Firefox or Google Chrome to visit the lots-of-polys-example.html test page in the Khronos WebGL SDK.


Array index error in win32k.sys in the kernel-mode drivers in Microsoft Windows Server 2008 R2 and R2 SP1 and Windows 7 Gold and SP1 allows remote attackers to cause a denial of service (reboot) via a crafted TrueType font file aka \TrueType Font Parsing Vulnerability \ a different vulnerability than CVE-2011-3402.


net/core/net_namespace.c in the Linux kernel 2.6.32 and earlier does not properly handle a high rate of creation and cleanup of network namespaces which makes it easier for remote attackers to cause a denial of service (memory consumption) via requests to a daemon that requires a separate namespace per connection as demonstrated by vsftpd.


The server in ISC DHCP 3.x and 4.x before 4.2.2 3.1-ESV before 3.1-ESV-R3 and 4.1-ESV before 4.1-ESV-R3 allows remote attackers to cause a denial of service (daemon exit) via a crafted DHCP packet.


Google Chrome 14.0.794.0 does not properly handle a reload of a page generated in response to a POST which allows user-assisted remote attackers to cause a denial of service (application crash) via a crafted web site related to GetWidget methods.


The cat6000-dot1x component in Cisco IOS 12.2 before 12.2(33)SXI7 does not properly handle (1) a loop between a dot1x enabled port and an open-authentication dot1x enabled port and (2) a loop between a dot1x enabled port and a non-dot1x port which allows remote attackers to cause a denial of service (traffic storm) via unspecified vectors that trigger many Spanning Tree Protocol (STP) Bridge Protocol Data Unit (BPDU) frames aka Bug ID CSCtq36327.


Off-by-one error in the elem_cell_id_aux function in epan/dissectors/packet-ansi_a.c in the ANSI MAP dissector in Wireshark 1.4.x before 1.4.8 and 1.6.x before 1.6.1 allows remote attackers to cause a denial of service (infinite loop) via an invalid packet.


Microsoft Forefront Unified Access Gateway (UAG) 2010 Gold Update 1 Update 2 and SP1 does not properly validate session cookies which allows remote attackers to cause a denial of service (IIS outage) via unspecified network traffic aka \Null Session Cookie Crash.\


Opera before 11.10 allows remote attackers to cause a denial of service (application crash) via an HTML document that has an empty parameter value for an embedded Java applet.


The check_mtab function in client/mount.cifs.c in mount.cifs in smbfs in Samba 3.5.10 and earlier does not properly verify that the (1) device name and (2) mountpoint strings are composed of valid characters which allows local users to cause a denial of service (mtab corruption) via a crafted string. NOTE: this vulnerability exists because of an incorrect fix for CVE-2010-0547.


The Array.prototype.join method in Opera before 11.50 allows remote attackers to cause a denial of service (application crash) via a non-array object that contains initial holes.


Unspecified vulnerability in ISC BIND 9 9.8.0 9.8.0-P1 9.8.0-P2 and 9.8.1b1 when recursion is enabled and the Response Policy Zone (RPZ) contains DNAME or certain CNAME records allows remote attackers to cause a denial of service (named daemon crash) via an unspecified query.


XMLParser.pm in DJabberd before 0.85 allows remote authenticated users to read arbitrary files and possibly send HTTP requests to intranet servers or cause a denial of service (CPU and memory consumption) via an XML external entity declaration in conjunction with an entity reference a different vulnerability than CVE-2011-1757.


The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in FreeBSD NetBSD and possibly other BSD-based operating systems allows remote attackers to cause a denial of service (CPU consumption and device hang) by sending many Router Advertisement (RA) messages with different source addresses a similar vulnerability to CVE-2010-4670.


Unspecified vulnerability in the Service Advertisement Framework (SAF) in Cisco Unified Communications Manager (aka CUCM formerly CallManager) 8.x before 8.5(1) and Cisco Intercompany Media Engine 8.x before 8.5(1) allows remote attackers to cause a denial of service (device reload) via crafted SAF packets aka Bug ID CSCth26669.


Opera before 11.50 allows remote attackers to cause a denial of service (application crash) by using \injected script\ to set the SRC attribute of an IFRAME element.


Google Chrome before 14.0.835.202 does not properly handle SVG text which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to \stale font.\


The HTTP client in Cisco IOS 12.4 and 15.0 allows user-assisted remote attackers to cause a denial of service (device crash) via a malformed HTTP response to a request for service installation aka Bug ID CSCts12249.


The Linux kernel from v2.3.36 before v2.6.39 allows local unprivileged users to cause a denial of service (memory consumption) by triggering creation of PTE pages.


win32k.sys in the kernel-mode drivers in Microsoft Windows Vista SP2 Windows Server 2008 SP2 R2 and R2 SP1 and Windows 7 Gold and SP1 does not properly handle TrueType fonts which allows local users to cause a denial of service (system hang) via a crafted font file aka \Win32k TrueType Font Type Translation Vulnerability.\


IBM Lotus Symphony 3 before FP3 allows remote attackers to cause a denial of service (application crash) via a .docx document with empty bullet styles for parent bullets.


Opera before 11.11 does not properly handle destruction of a Silverlight instance which allows remote attackers to cause a denial of service (application crash) via a web page as demonstrated by vod.onet.pl.


The platform-sw component on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2 before 8.2(5.3) 8.3 before 8.3(2.20) and 8.4 before 8.4(2.1) does not properly handle non-ASCII characters in an interface description which allows local users to cause a denial of service (reload without configuration) via a crafted description aka Bug ID CSCtq50523.


Unspecified vulnerability in Cisco TelePresence C Series Endpoints E/EX Personal Video units and MXP Series Codecs when using software versions before TC 4.0.0 or F9.1 allows remote attackers to cause a denial of service (crash) via a crafted SIP packet to port 5060 or 5061 aka Bug ID CSCtq46500.


The NVIDIA 9400M driver 6.2.6 on Mac OS X 10.6.7 allows remote attackers to cause a denial of service (desktop hang) via a crafted web page that is visited with Google Chrome or Mozilla Firefox as demonstrated by the lots-of-polys-example.html test page in the Khronos WebGL SDK.


The add_del_listener function in kernel/taskstats.c in the Linux kernel 2.6.39.1 and earlier does not prevent multiple registrations of exit handlers which allows local users to cause a denial of service (memory and CPU consumption) and bypass the OOM Killer via a crafted application.


The bsd_glob function in the File::Glob module for Perl before 5.14.2 allows context-dependent attackers to cause a denial of service (crash) via a glob expression with the GLOB_ALTDIRFUNC flag which triggers an uninitialized pointer dereference.


Cisco IOS 12.4MDA before 12.4(24)MDA5 on the Cisco Content Services Gateway - Second Generation (CSG2) allows remote attackers to cause a denial of service (device reload) via crafted ICMP packets aka Bug ID CSCtl79577.


The gfs2_fallocate function in fs/gfs2/file.c in the Linux kernel before 3.0-rc1 does not ensure that the size of a chunk allocation is a multiple of the block size which allows local users to cause a denial of service (BUG and system crash) by arranging for all resource groups to have too little free space.


The inet_diag_bc_audit function in net/ipv4/inet_diag.c in the Linux kernel before 2.6.39.3 does not properly audit INET_DIAG bytecode which allows local users to cause a denial of service (kernel infinite loop) via crafted INET_DIAG_REQ_BYTECODE instructions in a netlink message as demonstrated by an INET_DIAG_BC_JMP instruction with a zero yes value a different vulnerability than CVE-2010-3880.


IBM Lotus Symphony 3 before FP3 on Linux allows remote attackers to cause a denial of service (application crash) via a certain sample document.


The png_err function in pngerror.c in libpng 1.0.x before 1.0.55 1.2.x before 1.2.45 1.4.x before 1.4.8 and 1.5.x before 1.5.4 makes a function call using a NULL pointer argument instead of an empty-string argument which allows remote attackers to cause a denial of service (application crash) via a crafted PNG image.


The NVIDIA Geforce 310 driver 6.14.12.7061 on Windows XP SP3 allows remote attackers to cause a denial of service (system crash) via a crafted web page that is visited with Google Chrome or Mozilla Firefox as demonstrated by the lots-of-polys-example.html test page in the Khronos WebGL SDK.


The PDF implementation in Google Chrome before 13.0.782.215 on Linux does not properly use the memset library function which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.


The x86_assign_hw_event function in arch/x86/kernel/cpu/perf_event.c in the Performance Events subsystem in the Linux kernel before 2.6.39 does not properly calculate counter values which allows local users to cause a denial of service (panic) via the perf program.


Cisco Unified Contact Center Express (aka CCX) 8.0 and 8.5 allows remote attackers to cause a denial of service via network traffic as demonstrated by an SEC-BE-STABLE test case aka Bug ID CSCth33834.


The gdk_pixbuf__gif_image_load function in gdk-pixbuf/io-gif.c in gdk-pixbuf before 2.23.5 does not properly handle certain return values which allows remote attackers to cause a denial of service (memory consumption) via a crafted GIF image file.


Multiple off-by-one errors in the ext4 subsystem in the Linux kernel before 3.0-rc5 allow local users to cause a denial of service (BUG_ON and system crash) by accessing a sparse file in extent format with a write operation involving a block number corresponding to the largest possible 32-bit unsigned integer.


The Lucent/Ascend file parser in Wireshark 1.2.x before 1.2.18 1.4.x through 1.4.7 and 1.6.0 allows remote attackers to cause a denial of service (infinite loop) via malformed packets.


The WebGL implementation in Mozilla Firefox 4.x through 4.0.1 does not properly restrict read operations which allows remote attackers to obtain sensitive information from GPU memory associated with an arbitrary process or cause a denial of service (application crash) via unspecified vectors.


The agp_generic_remove_memory function in drivers/char/agp/generic.c in the Linux kernel before 2.6.38.5 does not validate a certain start parameter which allows local users to gain privileges or cause a denial of service (system crash) via a crafted AGPIOC_UNBIND agp_ioctl ioctl call a different vulnerability than CVE-2011-1745.


The IPv6 implementation in the Linux kernel before 3.1 does not generate Fragment Identification values separately for each destination which makes it easier for remote attackers to cause a denial of service (disrupted networking) by predicting these values and sending crafted packets.


chan_iax2.c in the IAX2 channel driver in Asterisk Open Source 1.4.x before 1.4.41.1 1.6.2.x before 1.6.2.18.1 and 1.8.x before 1.8.4.3 and Asterisk Business Edition C.3 before C.3.7.3 accesses a memory address contained in an option control frame which allows remote attackers to cause a denial of service (daemon crash) or possibly have unspecified other impact via a crafted frame.


The cat6000-dot1x component in Cisco IOS 12.2 before 12.2(33)SXI7 does not properly handle an external loop between a pair of dot1x enabled ports which allows remote attackers to cause a denial of service (traffic storm) via unspecified vectors that trigger many unicast EAPoL Protocol Data Units (PDUs) aka Bug ID CSCtq36336.


The Network Lock Manager (NLM) protocol implementation in the NFS client functionality in the Linux kernel before 3.0 allows local users to cause a denial of service (system hang) via a LOCK_UN flock system call.


The implementation of OutputMediator objects in IBM WebSphere Portal 6.0.1.7 and 7.0.0.1 before CF002 allows remote authenticated users to cause a denial of service (memory consumption) via requests.


Unspecified vulnerability in ISC BIND 9 9.6.x before 9.6-ESV-R4-P3 9.7.x before 9.7.3-P3 and 9.8.x before 9.8.0-P4 allows remote attackers to cause a denial of service (named daemon crash) via a crafted UPDATE request.


The get_dataroot_image_path function in lib/file.php in Mahara before 1.4.1 does not properly validate uploaded image files which allows remote attackers to cause a denial of service (memory consumption) via a (1) large or (2) invalid image.


The tomoyo_mount_acl function in security/tomoyo/mount.c in the Linux kernel before 2.6.39.2 calls the kern_path function with arguments taken directly from a mount system call which allows local users to cause a denial of service (OOPS) or possibly have unspecified other impact via a NULL value for the device name.


Unspecified vulnerability in Cisco Unified Communications Manager (aka CUCM formerly CallManager) 6.x before 6.1(5)su2 7.x before 7.1(5b)su3 8.x before 8.0(3a)su1 and 8.5 before 8.5(1) allows remote attackers to cause a denial of service (service outage) via a SIP INVITE message aka Bug ID CSCth43256.


The DataPilot feature in IBM Lotus Symphony 3 before FP3 allows user-assisted remote attackers to cause a denial of service (application crash) via a large .xls spreadsheet with an invalid Value reference.


The unxorFrame function in epan/dissectors/packet-opensafety.c in the OpenSafety dissector in Wireshark 1.6.x before 1.6.2 does not properly validate a certain frame size which allows remote attackers to cause a denial of service (loop and application crash) via a malformed packet.


Unspecified vulnerability in Cisco IOS 12.2SRE before 12.2(33)SRE4 15.0 and 15.1 and IOS XE 2.1.x through 3.3.x when an MPLS domain is configured allows remote attackers to cause a denial of service (device crash) via a crafted IPv6 packet related to an expired MPLS TTL aka Bug ID CSCto07919.


The OGG container in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an out-of-bounds write.


Mozilla Firefox 4.x through 8.0 Thunderbird 5.0 through 8.0 and SeaMonkey before 2.6 allow remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via an Ogg VIDEO element that is not properly handled after scaling.


Google Chrome before 17.0.963.65 does not properly perform casts of unspecified variables during the splitting of anonymous blocks which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted document.


Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google Chrome before 17.0.963.83 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the cross-fade function.


Cisco Adaptive Security Appliances (ASA) 5500 series devices and the ASA Services module in Cisco Catalyst 6500 series devices with software 7.0 before 7.0(8.13) 7.1 and 7.2 before 7.2(5.4) 8.0 before 8.0(5.25) 8.1 and 8.2 before 8.2(5.11) 8.3 before 8.3(2.23) 8.4 before 8.4(2.6) and 8.5 before 8.5(1.1) and Cisco Firewall Services Module (aka FWSM) 3.1 before 3.1(21) 3.2 before 3.2(22) 4.0 before 4.0(16) and 4.1 before 4.1(7) allow remote attackers to cause a denial of service (device reload) via crafted SunRPC traffic aka Bug IDs CSCto92380 and CSCtq09972.


The class file parser in IBM Java 1.4.2 SR13 FP9 allows remote authenticated users to cause a denial of service (memory consumption or an infinite loop) via a crafted attribute length field in a class file related to validation of a length field at the wrong time a different vulnerability than CVE-2011-0311.


ospf_packet.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) via (1) a 0x0a type field in an IPv4 packet header or (2) a truncated IPv4 Hello packet.


Unspecified vulnerability in Cisco IOS 15.0 through 15.1 in certain HTTP Layer 7 Application Control and Inspection configurations allows remote attackers to cause a denial of service (device reload or hang) via a crafted HTTP packet aka Bug ID CSCto68554.


Google Chrome before 17.0.963.83 does not properly restrict the extension web request API which allows remote attackers to cause a denial of service (disrupted system requests) via a crafted extension.


A certain Red Hat patch to the be2net implementation in the kernel package before 2.6.32-218.el6 on Red Hat Enterprise Linux (RHEL) 6 when promiscuous mode is enabled allows remote attackers to cause a denial of service (system crash) via non-member VLAN packets.


Use-after-free vulnerability in Google Chrome before 18.0.1025.168 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the floating of elements a different vulnerability than CVE-2011-3081.


Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service (application crash) via vectors that trigger a large amount of database usage.


Cisco Adaptive Security Appliances (ASA) 5500 series devices and the ASA Services module in Cisco Catalyst 6500 series devices with software 7.0 before 7.0(8.13) 7.1 and 7.2 before 7.2(5.4) 8.0 before 8.0(5.25) 8.1 and 8.2 before 8.2(5.11) 8.3 before 8.3(2.23) 8.4 before 8.4(2.6) and 8.5 before 8.5(1.1) and Cisco Firewall Services Module (aka FWSM) 3.1 before 3.1(21) 3.2 before 3.2(22) 4.0 before 4.0(16) and 4.1 before 4.1(7) allow remote attackers to cause a denial of service (device reload) via crafted SunRPC traffic aka Bug IDs CSCtq06065 and CSCtq09978.


Google Chrome before 17.0.963.56 does not properly perform a cast of an unspecified variable during handling of columns which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted document.


The Autofill feature in Google Chrome before 19.0.1084.46 does not properly restrict field values which allows remote attackers to cause a denial of service (UI corruption) and possibly conduct spoofing attacks via vectors involving long values.


Cisco Video Surveillance 2421 and 2500 series cameras with software 1.1.x and 2.x before 2.4.0 and Video Surveillance 2600 series cameras with software before 4.2.0-13 allow remote attackers to cause a denial of service (device reload) by sending crafted RTSP packets over TCP aka Bug IDs CSCtj96312 CSCtj39462 and CSCtl80175.


The NETIO and IPV4_IO processes in Cisco IOS XR 3.8 through 4.1 as used in Cisco Carrier Routing System and other products allow remote attackers to cause a denial of service (CPU consumption) via crafted network traffic aka Bug ID CSCti59888.


The UIKit Alerts component in Apple iOS before 5 allows remote attackers to cause a denial of service (device hang) via a long tel: URL that triggers a large size for the acceptance dialog.


The SVG implementation in Mozilla Firefox 8.0 Thunderbird 8.0 and SeaMonkey 2.5 does not properly interact with DOMAttrModified event handlers which allows remote attackers to cause a denial of service (out-of-bounds memory access) or possibly have unspecified other impact via vectors involving removal of SVG elements.


Cisco Adaptive Security Appliances (ASA) 5500 series devices and the ASA Services module in Cisco Catalyst 6500 series devices with software 7.2 before 7.2(5.3) 8.0 before 8.0(5.25) 8.1 before 8.1(2.50) 8.2 before 8.2(5.11) 8.3 before 8.3(2.23) 8.4 before 8.4(2) and 8.5 before 8.5(1.1) allow remote attackers to cause a denial of service (device reload) via crafted MSN Instant Messenger traffic aka Bug ID CSCtl67486.


Unspecified vulnerability in the NAT implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1 and IOS XE 3.1.xSG allows remote attackers to cause a denial of service (device reload) by sending crafted SIP packets to UDP port 5060 aka Bug ID CSCti48483.


Use-after-free vulnerability in Google Chrome before 18.0.1025.168 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the floating of elements a different vulnerability than CVE-2011-3078.


The bytecode engine in ClamAV before 0.97.3 allows remote attackers to cause a denial of service (crash) via vectors related to \recursion level\ and (1) libclamav/bytecode.c and (2) libclamav/bytecode_api.c.


Google Chrome before 17.0.963.46 allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via vectors that trigger the aborting of an IndexedDB transaction.


Cisco Adaptive Security Appliances (ASA) 5500 series devices and the ASA Services module in Cisco Catalyst 6500 series devices with software 7.0 before 7.0(8.13) 7.1 and 7.2 before 7.2(5.4) 8.0 before 8.0(5.25) 8.1 and 8.2 before 8.2(5.11) 8.3 before 8.3(2.23) 8.4 before 8.4(2.6) and 8.5 before 8.5(1.1) and Cisco Firewall Services Module (aka FWSM) 3.1 before 3.1(21) 3.2 before 3.2(22) 4.0 before 4.0(16) and 4.1 before 4.1(7) allow remote attackers to cause a denial of service (device reload) via crafted SunRPC traffic aka Bug IDs CSCtq06062 and CSCtq09986.


Google Chrome before 19.0.1084.52 on Linux does not properly perform a cast of an unspecified variable which allows remote attackers to cause a denial of service or possibly have unknown other impact by leveraging an error in the GTK implementation of the UI.


The png_handle_cHRM function in pngrutil.c in libpng 1.5.4 when color-correction support is enabled allows remote attackers to cause a denial of service (divide-by-zero error and application crash) via a malformed PNG image containing a cHRM chunk associated with a certain zero value.


The setup_cifs_sb function in fs/cifs/connect.c in the Linux kernel before 2.6.39 does not properly handle DFS referrals which allows remote CIFS servers to cause a denial of service (system crash) by placing a referral at the root of a share.


Unspecified vulnerability in Twilight Frontier Touhou Hisouten 1.06 and earlier allows remote attackers to cause a denial of service (daemon crash) via unknown network traffic.


Cisco Unified Presence before 8.5(4) does not properly detect recursion during entity expansion which allows remote attackers to cause a denial of service (memory and CPU consumption and process crash) via a crafted XML document containing a large number of nested entity references aka Bug IDs CSCtq89842 and CSCtq88547 a similar issue to CVE-2003-1564.


The provider-edge MPLS NAT implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1 and IOS XE 3.1.xSG allows remote attackers to cause a denial of service (device reload) via a malformed SIP packet to UDP port 5060 aka Bug ID CSCti98219.


The m_stop function in fs/proc/task_mmu.c in the Linux kernel before 2.6.39 allows local users to cause a denial of service (OOPS) via vectors that trigger an m_start error.


The byterange filter in the Apache HTTP Server 1.3.x 2.0.x through 2.0.64 and 2.2.x through 2.2.19 allows remote attackers to cause a denial of service (memory and CPU consumption) via a Range header that expresses multiple overlapping ranges as exploited in the wild in August 2011 a different vulnerability than CVE-2007-0086.


Integer signedness error in the decode_residual_inter function in cavsdec.c in libavcodec in FFmpeg before 0.7.4 and 0.8.x before 0.8.3 allows remote attackers to cause a denial of service (incorrect write operation and application crash) via an invalid bitstream in a Chinese AVS video (aka CAVS) file a different vulnerability than CVE-2011-3362.


Mozilla Firefox before 9.0 Thunderbird before 9.0 and SeaMonkey before 2.6 on Mac OS X do not properly handle certain DOM frame deletions by plugins which allows remote attackers to cause a denial of service (incorrect pointer dereference and application crash) or possibly have unspecified other impact via a crafted web site.


Google Chrome before 17.0.963.65 does not properly perform a cast of an unspecified variable during handling of line boxes which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted document.


Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google Chrome before 17.0.963.83 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the :first-letter pseudo-element.


Use-after-free vulnerability in the Cascading Style Sheets (CSS) implementation in Google Chrome before 19.0.1084.52 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to the :first-letter pseudo-element.


The ospf6_lsa_is_changed function in ospf6_lsa.c in the OSPFv3 implementation in ospf6d in Quagga before 0.99.19 allows remote attackers to cause a denial of service (assertion failure and daemon exit) via trailing zero values in the Link State Advertisement (LSA) header list of an IPv6 Database Description message.


Memory leak in the NAT implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1 and IOS XE 3.1.xSG allows remote attackers to cause a denial of service (memory consumption or device reload) by sending crafted SIP packets to UDP port 5060 aka Bug ID CSCtj04672.


The PDF functionality in Google Chrome before 19.0.1084.52 does not properly perform a cast of an unspecified variable during handling of color spaces which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted document.


The mod_proxy_ajp module in the Apache HTTP Server before 2.2.21 when used with mod_proxy_balancer in certain configurations allows remote attackers to cause a denial of service (temporary \error state\ in the backend server) via a malformed HTTP request.


PHP before 5.3.7 does not properly implement the error_log function which allows context-dependent attackers to cause a denial of service (application crash) via unspecified vectors.


Cisco Adaptive Security Appliances (ASA) 5500 series devices and the ASA Services module in Cisco Catalyst 6500 series devices with software 7.0 before 7.0(8.13) 7.1 and 7.2 before 7.2(5.4) 8.0 before 8.0(5.25) 8.1 before 8.1(2.50) 8.2 before 8.2(5.6) 8.3 before 8.3(2.23) 8.4 before 8.4(2.7) and 8.5 before 8.5(1.1) and Cisco Firewall Services Module (aka FWSM) 3.1 before 3.1(21) 3.2 before 3.2(22) 4.0 before 4.0(16) and 4.1 before 4.1(7) allow remote attackers to cause a denial of service (device reload) via malformed ILS traffic aka Bug IDs CSCtq57697 and CSCtq57802.


Unspecified vulnerability in dxserver before 6279 in CA Directory 8.1 and CA Directory r12 before SP7 CR1 allows remote attackers to cause a denial of service (daemon crash) via a crafted SNMP packet.


Google Chrome before 17.0.963.56 allows remote attackers to cause a denial of service (application crash) via an empty X.509 certificate.


zabbix_agentd in Zabbix before 1.8.6 and 1.9.x before 1.9.4 allows context-dependent attackers to cause a denial of service (CPU consumption) by executing the vfs.file.cksum command for a special device as demonstrated by the /dev/urandom device.


The msn_httpconn_parse_data function in httpconn.c in the MSN protocol plugin in libpurple in Pidgin before 2.10.0 does not properly handle HTTP 100 responses which allows remote attackers to cause a denial of service (incorrect memory access and application crash) via vectors involving a crafted server message.


The Zygote process in Android 4.0.3 and earlier accepts fork requests from processes with arbitrary UIDs which allows remote attackers to cause a denial of service (reboot loop) via a crafted application.


regcomp in the BSD implementation of libc is vulnerable to denial of service due to stack exhaustion.


The CtcpParser::packedReply method in core/ctcpparser.cpp in Quassel before 0.7.3 allows remote attackers to cause a denial of service (crash) via a crafted Client-To-Client Protocol (CTCP) request as demonstrated in the wild in September 2011.


Unspecified vulnerability in the NAT implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1 and IOS XE 3.1.xSG allows remote attackers to cause a denial of service (device reload) by sending crafted H.323 packets to TCP port 1720 aka Bug ID CSCth11006.


The internationalization (aka i18n) functionality in Google V8 as used in Google Chrome before 16.0.912.63 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an out-of-bounds write.


The (1) IPv4 and (2) IPv6 implementations in the Linux kernel before 3.1 use a modified MD4 algorithm to generate sequence numbers and Fragment Identification values which makes it easier for remote attackers to cause a denial of service (disrupted networking) or hijack network sessions by predicting these values and sending crafted packets.


dtsoftbus01.sys in DAEMON Tools Lite before 4.41.3 Pro Standard before 4.41.0315 and Pro Advanced before 4.41.0315 allows local users to cause a denial of service (system crash) via an invalid DeviceIoControl request to \\\\.\\dtsoftbusctl.


Wireshark 1.6.x before 1.6.2 allows remote attackers to cause a denial of service (application crash) via a malformed capture file that leads to an invalid root tvbuff related to a \buffer exception handling vulnerability.\


Memory leak in Cisco IOS 15.0 through 15.1 when IPS or Zone-Based Firewall (aka ZBFW) is configured allows remote attackers to cause a denial of service (memory consumption or device crash) via vectors that trigger many session creation flows aka Bug ID CSCti79848.


The ospf_flood function in ospf_flood.c in ospfd in Quagga before 0.99.19 allows remote attackers to cause a denial of service (daemon crash) via an invalid Link State Advertisement (LSA) type in an IPv4 Link State Update message.


The div_long_long_rem implementation in include/asm-x86/div64.h in the Linux kernel before 2.6.26 on the x86 platform allows local users to cause a denial of service (Divide Error Fault and panic) via a clock_gettime system call.


Google Chrome before 19.0.1084.52 does not properly implement JavaScript bindings for plug-ins which allows remote attackers to cause a denial of service (application crash) or possibly have unspecified other impact via unknown vectors.


Unspecified vulnerability in Cisco IOS 12.2SRE before 12.2(33)SRE4 15.0 and 15.1 and IOS XE 2.1.x through 3.3.x when an MPLS domain is configured allows remote attackers to cause a denial of service (device reload) via an ICMPv6 packet related to an expired MPLS TTL aka Bug ID CSCtj30155.


The regex implementation in Google V8 as used in Google Chrome before 19.0.1084.46 allows remote attackers to cause a denial of service (invalid write operation) or possibly have unspecified other impact via unknown vectors.


The OSPFv3 implementation in ospf6d in Quagga before 0.99.19 allows remote attackers to cause a denial of service (out-of-bounds memory access and daemon crash) via a Link State Update message with an invalid IPv6 prefix length.


The _expand_arg function in the pam_env module (modules/pam_env/pam_env.c) in Linux-PAM (aka pam) before 1.1.5 does not properly handle when environment variable expansion can overflow which allows local users to cause a denial of service (CPU consumption).


The dma_rx function in drivers/net/wireless/b43/dma.c in the Linux kernel before 2.6.39 does not properly allocate receive buffers which allows remote attackers to cause a denial of service (system crash) via a crafted frame.


Unspecified vulnerability in the NAT implementation in Cisco IOS 12.1 through 12.4 and 15.0 through 15.1 and IOS XE 3.1.xSG allows remote attackers to cause a denial of service (device reload or hang) by sending crafted SIP packets to TCP port 5060 aka Bug ID CSCso02147.


The process_rs function in the router advertisement daemon (radvd) before 1.8.2 when UnicastOnly is enabled allows remote attackers to cause a denial of service (temporary service hang) via a large number of ND_ROUTER_SOLICIT requests.


Cisco Jabber Extensible Communications Platform (aka Jabber XCP) 2.x through 5.4.x before 5.4.0.27581 and 5.8.x before 5.8.1.27561 does not properly detect recursion during entity expansion which allows remote attackers to cause a denial of service (memory and CPU consumption and process crash) via a crafted XML document containing a large number of nested entity references aka Bug ID CSCtq78106 a similar issue to CVE-2003-1564.


GEAR Software CD DVD Filter driver (aka GEARAspiWDM.sys) as used in Symantec Backup Exec System Recovery 8.5 and BESR 2010 Symantec System Recovery 2011 Norton 360 and Norton Ghost allows local users to cause a denial of service (system crash) via unspecified vectors.


cavsdec.c in libavcodec in FFmpeg before 0.7.4 and 0.8.x before 0.8.3 allows remote attackers to cause a denial of service (incorrect write operation and application crash) via an invalid bitstream in a Chinese AVS video (aka CAVS) file related to the decode_residual_block check_for_slice and cavs_decode_frame functions a different vulnerability than CVE-2011-3362.


The csnStreamDissector function in epan/dissectors/packet-csn1.c in the CSN.1 dissector in Wireshark 1.6.x before 1.6.2 does not initialize a certain structure member which allows remote attackers to cause a denial of service (application crash) via a malformed packet.


The Fibre Channel driver for QLogic adapters in IBM AIX 6.1 and 7.1 does not properly handle DMA resource limitations which allows local users to cause a denial of service (system hang) via vectors that generate a large amount of DMA I/O related to a deadlock in timer processing across CPUs.


Cisco Carrier Routing System 3.9.1 allows remote attackers to cause a denial of service (Metro subsystem crash) via a fragmented GRE packet aka Bug ID CSCts14887.


The ephemeral ECDH ciphersuite functionality in OpenSSL 0.9.8 through 0.9.8r and 1.0.x before 1.0.0e does not ensure thread safety during processing of handshake messages from clients which allows remote attackers to cause a denial of service (daemon crash) via out-of-order messages that violate the TLS protocol.


The proto_tree_add_item function in Wireshark 1.6.0 through 1.6.1 and 1.4.0 through 1.4.8 when the IKEv1 protocol dissector is used allows user-assisted remote attackers to cause a denial of service (infinite loop) via vectors involving a malformed IKE packet and many items in a tree.


Cisco Adaptive Security Appliances (ASA) 5500 series devices and the ASA Services module in Cisco Catalyst 6500 series devices with software 7.0 before 7.0(8.13) 7.1 and 7.2 before 7.2(5.4) 8.0 before 8.0(5.25) 8.1 and 8.2 before 8.2(5.11) 8.3 before 8.3(2.23) 8.4 before 8.4(2.6) and 8.5 before 8.5(1.1) and Cisco Firewall Services Module (aka FWSM) 3.1 before 3.1(21) 3.2 before 3.2(22) 4.0 before 4.0(16) and 4.1 before 4.1(7) allow remote attackers to cause a denial of service (device reload) via crafted SunRPC traffic aka Bug IDs CSCto92398 and CSCtq09989.


Use-after-free vulnerability in Google Chrome before 15.0.874.102 allows user-assisted remote attackers to cause a denial of service or possibly have unspecified other impact via vectors related to editing operations in conjunction with an unknown plug-in.


server/webmail.php in IceWarp WebMail in IceWarp Mail Server before 10.3.3 allows remote attackers to read arbitrary files and possibly send HTTP requests to intranet servers or cause a denial of service (CPU and memory consumption) via an XML external entity declaration in conjunction with an entity reference.


Cisco Firewall Services Module (aka FWSM) 3.1 before 3.1(21) 3.2 before 3.2(22) 4.0 before 4.0(16) and 4.1 before 4.1(7) when certain authentication configurations are used allows remote attackers to cause a denial of service (module crash) by making many authentication requests for network access aka Bug ID CSCtn15697.


The LiveData Service in CSWorks before 2.0.4115.1 allows remote attackers to cause a denial of service (service crash) via crafted TCP packets.


tools/libxc/xc_dom_bzimageloader.c in Xen 3.2 3.3 4.0 and 4.1 allows local users to cause a denial of service (management software infinite loop and management domain resource consumption) via unspecified vectors related to \Lack of error checking in the decompression loop.\


Use-after-free vulnerability in Google Chrome before 17.0.963.65 allows remote attackers to cause a denial of service or possibly have unspecified other impact via vectors involving a flexbox (aka flexible box) in conjunction with the floating of elements.


fs/ext4/extents.c in the Linux kernel before 3.0 does not mark a modified extent as dirty in certain cases of extent splitting which allows local users to cause a denial of service (system crash) via vectors involving ext4 umount and mount operations.


The urllib and urllib2 modules in Python 2.x before 2.7.2 and 3.x before 3.2.1 process Location headers that specify redirection to file: URLs which makes it easier for remote attackers to obtain sensitive information or cause a denial of service (resource consumption) via a crafted URL as demonstrated by the file:///etc/passwd and file:///dev/zero URLs.


in

WebCore

in

WebKit

in

Google

Chrome

before

allows

remote

attackers

to

cause

a

denial

of

service

(application

crash)

or

possibly

have

unspecified

other

impact

via

a

crafted

SVG

document

that

leads

to

a

\stale

pointer.\


The ip_expire function in net/ipv4/ip_fragment.c in the Linux kernel before 2.6.39 does not properly construct ICMP_TIME_EXCEEDED packets after a timeout which allows remote attackers to cause a denial of service (invalid pointer dereference) via crafted fragmented packets.


The loadUserSettings function in Load.php in Simple Machines Forum (SMF) before 1.1.13 and 2.x before 2.0 RC5 does not properly handle invalid login attempts which might make it easier for remote attackers to obtain access or cause a denial of service via a brute-force attack.


Multiple unspecified vulnerabilities in a third-party component of the Citrix Licensing Administration Console 11.6 formerly License Management Console allow remote attackers to (1) access unauthorized \license administration functionality\ or (2) cause a denial of service via unknown vectors.


expat_erl.c in ejabberd before 2.1.7 and 3.x before 3.0.0-alpha-3 and exmpp before 0.9.7 does not properly detect recursion during entity expansion which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references a similar issue to CVE-2003-1564.


Unspecified vulnerability in Cisco Unified Communications Manager (aka CUCM formerly CallManager) 6.x before 6.1(5)su2 7.x before 7.1(5)su1 8.0 before 8.0(3) and 8.5 before 8.5(1) allows remote attackers to cause a denial of service (process failure) via a malformed SIP message aka Bug ID CSCtg62855.


Simple Machines Forum (SMF) before 1.1.13 and 2.x before 2.0 RC5 does not properly validate the start parameter which might allow remote attackers to conduct SQL injection attacks obtain sensitive information or cause a denial of service via a crafted value related to the cleanRequest function in QueryString.php and the constructPageIndex function in Subs.php.


The Remote Desktop Protocol (RDP) implementation in Microsoft Windows XP SP2 and SP3 and Windows Server 2003 SP2 does not properly process packets in memory which allows remote attackers to cause a denial of service (reboot) by sending crafted RDP packets triggering access to an object that (1) was not properly initialized or (2) is deleted as exploited in the wild in 2011 aka \Remote Desktop Protocol Vulnerability.\


The Zip extension in PHP before 5.3.6 allows context-dependent attackers to cause a denial of service (application crash) via a ziparchive stream that is not properly handled by the stream_get_contents function.


Cisco IOS XR 3.9.x and 4.0.x before 4.0.3 and 4.1.x before 4.1.1 when an SPA interface processor is installed allows remote attackers to cause a denial of service (device reload) via a crafted IPv4 packet aka Bug ID CSCto45095.


The __nfs4_proc_set_acl function in fs/nfs/nfs4proc.c in the Linux kernel before 2.6.38 stores NFSv4 ACL data in memory that is allocated by kmalloc but not properly freed which allows local users to cause a denial of service (panic) via a crafted attempt to set an ACL.


Google Chrome before 11.0.696.57 does not properly perform a cast of an unspecified variable during handling of floating select lists which allows remote attackers to cause a denial of service or possibly have unknown other impact via a crafted HTML document.


feedparser.py in Universal Feed Parser (aka feedparser or python-feedparser) before 5.0.1 allows remote attackers to cause a denial of service (application crash) via a malformed DOCTYPE declaration.


The bnep_sock_ioctl function in net/bluetooth/bnep/sock.c in the Linux kernel before 2.6.39 does not ensure that a certain device field ends with a '\\0' character which allows local users to obtain potentially sensitive information from kernel stack memory or cause a denial of service (BUG and system crash) via a BNEPCONNADD command.


The Internet Streamer application in Cisco Content Delivery System (CDS) with software 2.5.7 2.5.8 and 2.5.9 before build 126 allows remote attackers to cause a denial of service (Web Engine crash) via a crafted URL aka Bug IDs CSCtg67333 and CSCth25341.


The OGG container implementation in Google Chrome before 10.0.648.127 allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that trigger an out-of-bounds write.


Memory leak in the messaging engine in IBM WebSphere Application Server (WAS) before 7.0.0.15 allows remote attackers to cause a denial of service (memory consumption) via network connections associated with a NULL return value from a synchronous JMS receive call.


Google Chrome before 12.0.742.91 attempts to read data from an uninitialized pointer which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors.


Multiple memory leaks in the OpenSSL extension in PHP before 5.3.6 might allow remote attackers to cause a denial of service (memory consumption) via (1) plaintext data to the openssl_encrypt function or (2) ciphertext data to the openssl_decrypt function.


The

WebKit::WebPluginContainerImpl::handleEvent

function

in

Google

Chrome

before

Blink

allows

an

attacker

to

cause

a

denial

of

service

(crash)

via

the

htmlpluginelement.cpp

plugin.


DJabberd 0.84 and earlier does not properly detect recursion during entity expansion which allows remote attackers to cause a denial of service (memory and CPU consumption) via a crafted XML document containing a large number of nested entity references a similar issue to CVE-2003-1564.


Stack consumption vulnerability in the dissect_ber_choice function in the BER dissector in Wireshark 1.2.x through 1.2.15 and 1.4.x through 1.4.4 might allow remote attackers to cause a denial of service (infinite loop) via vectors involving self-referential ASN.1 CHOICE values.


Google Chrome before 9.0.597.107 does not properly process nodes in Cascading Style Sheets (CSS) stylesheets which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a \stale pointer.\


The Security component in IBM WebSphere Application Server (WAS) 6.1.0.x before 6.1.0.35 and 7.x before 7.0.0.15 allows remote authenticated users to cause a denial of service (memory consumption) by using a Lightweight Third-Party Authentication (LTPA) token for authentication.


The mod_dav_svn module for the Apache HTTP Server as distributed in Apache Subversion 1.5.x and 1.6.x before 1.6.17 when the SVNPathAuthz short_circuit option is enabled allows remote attackers to cause a denial of service (infinite loop and memory consumption) in opportunistic circumstances by requesting data.


Google Chrome before 10.0.648.204 does not properly handle Cascading Style Sheets (CSS) token sequences which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a \stale pointer.\


Use-after-free vulnerability in t1lib 5.1.2 and earlier as used in Xpdf before 3.02pl6 teTeX and other products allows remote attackers to cause a denial of service (application crash) via a PDF document containing a crafted Type 1 font that triggers an invalid memory write a different vulnerability than CVE-2011-0764.


Integer signedness error in the drm_modeset_ctl function in (1) drivers/gpu/drm/drm_irq.c in the Direct Rendering Manager (DRM) subsystem in the Linux kernel before 2.6.38 and (2) sys/dev/pci/drm/drm_irq.c in the kernel in OpenBSD before 4.9 allows local users to trigger out-of-bounds write operations and consequently cause a denial of service (system crash) or possibly have unspecified other impact via a crafted num_crtcs (aka vb_num) structure member in an ioctl argument.


rendering/RenderBox.cpp in WebCore in WebKit before r86862 as used in Google Chrome before 11.0.696.71 does not properly render floats which allows remote attackers to cause a denial of service or possibly have unspecified other impact via unknown vectors that lead to a \stale pointer.\


Google Chrome before 10.0.648.127 on Linux does not properly handle parallel execution of calls to the print method which might allow remote attackers to cause a denial of service (application crash) via crafted JavaScript code.


The agp subsystem in the Linux kernel 2.6.38.5 and earlier does not properly restrict memory allocation by the (1) AGPIOC_RESERVE and (2) AGPIOC_ALLOCATE ioctls which allows local users to cause a denial of service (memory consumption) by making many calls to these ioctls.


lib/logmatcher.c in Balabit syslog-ng before 3.2.4 when the global flag is set and when using PCRE 8.12 and possibly other versions allows remote attackers to cause a denial of service (memory consumption) via a message that does not match a regular expression.