CWE-400 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-400/ Sun, 26 Feb 2023 09:11:58 +0000 en-US hourly 1 https://wordpress.org/?v=7.0 https://cvevulnerability.com/wp-content/uploads/2023/02/cropped-Screenshot-2023-02-27-at-3.52.32-PM-32x32.png CWE-400 Archives - CVE Vulnerability https://cvevulnerability.com/cwe_categories/cwe-400/ 32 32 CVE-2008-7314 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-7314/ Sun, 26 Feb 2023 09:11:58 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-7314/ mIRC before 6.35 allows attackers to cause a denial of service (crash) via a long nickname.

The post CVE-2008-7314 appeared first on CVE Vulnerability.

]]> mIRC before 6.35 allows attackers to cause a denial of service (crash) via a long nickname.

The post CVE-2008-7314 appeared first on CVE Vulnerability.

]]> CVE-2008-3534 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-3534/ Sun, 26 Feb 2023 09:10:03 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-3534/ The shmem_delete_inode function in mm/shmem.c in the tmpfs implementation in the Linux kernel before 2.6.26.1 allows local users to cause a denial of service (system crash) via a certain sequence of file create, remove, and overwrite operations, as demonstrated by the insserv program, related to allocation of “useless pages” and improper maintenance of the i_blocks […]

The post CVE-2008-3534 appeared first on CVE Vulnerability.

]]> The shmem_delete_inode function in mm/shmem.c in the tmpfs implementation in the Linux kernel before 2.6.26.1 allows local users to cause a denial of service (system crash) via a certain sequence of file create, remove, and overwrite operations, as demonstrated by the insserv program, related to allocation of “useless pages” and improper maintenance of the i_blocks count.

The post CVE-2008-3534 appeared first on CVE Vulnerability.

]]> CVE-2008-2121 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-2121/ Sun, 26 Feb 2023 09:09:21 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-2121/ The TCP implementation in Sun Solaris 8, 9, and 10 allows remote attackers to cause a denial of service (CPU consumption and new connection timeouts) via a TCP SYN flood attack.

The post CVE-2008-2121 appeared first on CVE Vulnerability.

]]> The TCP implementation in Sun Solaris 8, 9, and 10 allows remote attackers to cause a denial of service (CPU consumption and new connection timeouts) via a TCP SYN flood attack.

The post CVE-2008-2121 appeared first on CVE Vulnerability.

]]> CVE-2008-0132 https://cvevulnerability.com/cve_vulnerabilities/cve-2008-0132/ Sun, 26 Feb 2023 09:08:24 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2008-0132/ Pragma FortressSSH 5.0 Build 4 Revision 293 and earlier handles long input to sshd.exe by creating an error-message window and waiting for the administrator to click in this window before terminating the sshd.exe process, which allows remote attackers to cause a denial of service (connection slot exhaustion) via a flood of SSH connections with long […]

The post CVE-2008-0132 appeared first on CVE Vulnerability.

]]> Pragma FortressSSH 5.0 Build 4 Revision 293 and earlier handles long input to sshd.exe by creating an error-message window and waiting for the administrator to click in this window before terminating the sshd.exe process, which allows remote attackers to cause a denial of service (connection slot exhaustion) via a flood of SSH connections with long data objects, as demonstrated by (1) a long list of keys and (2) a long username.

The post CVE-2008-0132 appeared first on CVE Vulnerability.

]]> CVE-2007-4725 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-4725/ Sun, 26 Feb 2023 09:07:22 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-4725/ Stack consumption vulnerability in AkkyWareHOUSE 7-zip32.dll before 4.42.00.04, as derived from Igor Pavlov 7-Zip before 4.53 beta, allows user-assisted remote attackers to execute arbitrary code via a long filename in an archive, leading to a heap-based buffer overflow.

The post CVE-2007-4725 appeared first on CVE Vulnerability.

]]> Stack consumption vulnerability in AkkyWareHOUSE 7-zip32.dll before 4.42.00.04, as derived from Igor Pavlov 7-Zip before 4.53 beta, allows user-assisted remote attackers to execute arbitrary code via a long filename in an archive, leading to a heap-based buffer overflow.

The post CVE-2007-4725 appeared first on CVE Vulnerability.

]]> CVE-2007-2650 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-2650/ Sun, 26 Feb 2023 09:06:24 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-2650/ The OLE2 parser in Clam AntiVirus (ClamAV) allows remote attackers to cause a denial of service (resource consumption) via an OLE2 file with (1) a large property size or (2) a loop in the FAT file block chain that triggers an infinite loop, as demonstrated via a crafted DOC file.

The post CVE-2007-2650 appeared first on CVE Vulnerability.

]]> The OLE2 parser in Clam AntiVirus (ClamAV) allows remote attackers to cause a denial of service (resource consumption) via an OLE2 file with (1) a large property size or (2) a loop in the FAT file block chain that triggers an infinite loop, as demonstrated via a crafted DOC file.

The post CVE-2007-2650 appeared first on CVE Vulnerability.

]]> CVE-2007-20001 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-20001/ Sun, 26 Feb 2023 09:06:06 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-20001/ A flaw was found in StarWind iSCSI target. An attacker could script standard iSCSI Initiator operation(s) to exhaust the StarWind service socket, which could lead to denial of service. This affects iSCSI SAN (Windows Native) Version 3.2.2 build 2007-02-20.

The post CVE-2007-20001 appeared first on CVE Vulnerability.

]]> A flaw was found in StarWind iSCSI target. An attacker could script standard iSCSI Initiator operation(s) to exhaust the StarWind service socket, which could lead to denial of service. This affects iSCSI SAN (Windows Native) Version 3.2.2 build 2007-02-20.

The post CVE-2007-20001 appeared first on CVE Vulnerability.

]]> CVE-2007-1377 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-1377/ Sun, 26 Feb 2023 09:05:50 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-1377/ AcroPDF.DLL in Adobe Reader 8.0, when accessed from Mozilla Firefox, Netscape, or Opera, allows remote attackers to cause a denial of service (unspecified resource consumption) via a .pdf URL with an anchor identifier that begins with search= followed by many %n sequences, a different vulnerability than CVE-2006-6027 and CVE-2006-6236.

The post CVE-2007-1377 appeared first on CVE Vulnerability.

]]> AcroPDF.DLL in Adobe Reader 8.0, when accessed from Mozilla Firefox, Netscape, or Opera, allows remote attackers to cause a denial of service (unspecified resource consumption) via a .pdf URL with an anchor identifier that begins with search= followed by many %n sequences, a different vulnerability than CVE-2006-6027 and CVE-2006-6236.

The post CVE-2007-1377 appeared first on CVE Vulnerability.

]]> CVE-2007-0086 https://cvevulnerability.com/cve_vulnerabilities/cve-2007-0086/ Sun, 26 Feb 2023 09:05:21 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2007-0086/ ** DISPUTED ** The Apache HTTP Server, when accessed through a TCP connection with a large window size, allows remote attackers to cause a denial of service (network bandwidth consumption) via a Range header that specifies multiple copies of the same fragment. NOTE: the severity of this issue has been disputed by third parties, who […]

The post CVE-2007-0086 appeared first on CVE Vulnerability.

]]> ** DISPUTED ** The Apache HTTP Server, when accessed through a TCP connection with a large window size, allows remote attackers to cause a denial of service (network bandwidth consumption) via a Range header that specifies multiple copies of the same fragment. NOTE: the severity of this issue has been disputed by third parties, who state that the large window size required by the attack is not normally supported or configured by the server, or that a DDoS-style attack would accomplish the same goal.

The post CVE-2007-0086 appeared first on CVE Vulnerability.

]]> CVE-2018-8854 https://cvevulnerability.com/cve_vulnerabilities/cve-2018-8854/ Sun, 26 Feb 2023 06:51:37 +0000 https://www.cvevulnerability.com/cve_vulnerabilities/cve-2018-8854/ Philips e-Alert Unit (non-medical device), Version R2.1 and prior. The software does not properly restrict the size or amount of resources requested or influenced by an actor, which can be used to consume more resources than intended.

The post CVE-2018-8854 appeared first on CVE Vulnerability.

]]> Philips e-Alert Unit (non-medical device), Version R2.1 and prior. The software does not properly restrict the size or amount of resources requested or influenced by an actor, which can be used to consume more resources than intended.

The post CVE-2018-8854 appeared first on CVE Vulnerability.

]]>