CWE-399: Resource Management Errors
Weaknesses in this category are related to improper management of system resources.
From the CWE List. © The MITRE Corporation.
Newest
- s60 symbian osSymbian OS S60 3rd edition on the Nokia E90 Communicator 07.40.1.2 Ra-6 and Nseries N82 allows...7.8 High
- microsoft internet explorerMshtml.dll in Microsoft Internet Explorer 7 Gold 7.0.5730 and 8 Beta 8.0.6001 on Windows XP SP2...4.3 Medium
- microsoft windows 2000, windows server 2003, windows server 2008 +2 more +4 moresrv.sys in the Server service in Microsoft Windows 2000 SP4, XP SP2 and SP3, Server 2003 SP1 and...7.1 High
- apple mac os x, mac os x server +1 moreVideoConference in Apple Mac OS X 10.4.11 and 10.5 through 10.5.4 allows remote attackers to...9.3 High
- apple mac os xFinder in Apple Mac OS X 10.5.2 through 10.5.4 allows remote attackers to cause a denial of...6.1 Medium
- apple mac os x, mac os x server +1 moreImageIO in Apple Mac OS X 10.4.11 and 10.5 through 10.5.4 allows context-dependent attackers to...9.3 High
- apple mac os x, mac os x server +1 moreImageIO in Apple Mac OS X 10.4.11 and 10.5 through 10.5.4 allows context-dependent attackers to...9.3 High
- apple iphone, ipod touch, iphone os +2 moreUse-after-free vulnerability in WebKit in Apple iPod touch 1.1 through 2.0.2, and iPhone 1.0...9.3 High
- apple quicktimeApple QuickTime before 7.5.5 allows remote attackers to cause a denial of service (application...4.3 Medium
- apple quicktimeApple QuickTime before 7.5.5 on Windows allows remote attackers to execute arbitrary code or...9.3 High
- apple quicktimeApple QuickTime before 7.5.5 does not properly handle (1) MDAT atoms in MP4 video files within...9.3 High
- apple quicktimeir50_32.qtx in an unspecified third-party Indeo v5 codec for QuickTime, when used with Apple...9.3 High
- microsoft digital image suite, forefront client security, internet explorer +10 more +12 moregdiplus.dll in GDI+ in Microsoft Internet Explorer 6 SP1, Windows XP SP2 and SP3, Server 2003 SP1...9.3 High
- clamav, debian linux +1 morelibclamav in ClamAV before 0.94 allows attackers to cause a denial of service (NULL pointer...5.0 Medium
- cisco adaptive security appliance 5500Memory leak in the crypto functionality in Cisco Adaptive Security Appliance (ASA) 5500 devices 7...7.1 High
- cisco secure acs, secure access control server +1 moreCisco Secure ACS 3.x before 3.3(4) Build 12 patch 7, 4.0.x, 4.1.x before 4.1(4) Build 13 Patch 11...7.5 High
- clam anti-virus clamavlibclamav/chmunpack.c in the chm-parser in ClamAV before 0.94 allows remote attackers to cause a...5.0 Medium
- apple quicktimeApple QuickTime before 7.4.5 allows remote attackers to cause a denial of service (crash) and...6.8 Medium
- fedora directory serverMultiple memory leaks in Red Hat Directory Server 7.1 before SP7, Red Hat Directory Server 8, and...7.8 High
- fedora directory serverRed Hat Directory Server 7.1 before SP7, Red Hat Directory Server 8, and Fedora Directory Server...7.1 High
- ruby-lang rubyThe regular expression engine (regex.c) in Ruby 1.8.5 and earlier, 1.8.6 through 1.8.6-p286, 1.8...5.0 Medium
- linux kernelThe rt6_fill_node function in net/ipv6/route.c in Linux kernel 2.6.26-rc4, 2.6.26.2, and possibly...4.9 Medium
- microsoft internet explorerMicrosoft Internet Explorer 5.01, 6, and 7 accesses uninitialized memory in certain conditions,...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 5.01, 6, and 7 accesses uninitialized memory in certain conditions,...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 5.01, 6, and 7 accesses uninitialized memory, which allows remote...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 6 and 7 accesses uninitialized memory, which allows remote attackers...9.3 High
- ruby-lang rubyAlgorithmic complexity vulnerability in the WEBrick::HTTPUtils.split_header_value function in...7.8 High
- ipsec-toolssrc/racoon/handler.c in racoon in ipsec-tools does not remove an "orphaned ph1" (phase 1) handle...7.8 High
- microsoft office, compatibility pack word excel powerpoint, office powerpoint viewer +2 moreA "memory calculation error" in Microsoft Office PowerPoint 2000 SP3, 2002 SP3, 2003 SP2, and...6.8 Medium
- microsoft office powerpoint viewerA "memory calculation error" in Microsoft PowerPoint Viewer 2003 allows remote attackers to...9.3 High
- microsoft office powerpoint viewerInteger overflow in Microsoft PowerPoint Viewer 2003 allows remote attackers to execute arbitrary...9.3 High
- microsoft office, office converter pack, works +2 moreWPGIMP32.FLT in Microsoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works...9.3 High
- microsoft office, office converter pack, works +2 moreMicrosoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 do not...9.3 High
- microsoft office, office converter pack, works +2 moreMicrosoft Office 2000 SP3 and XP SP3; Office Converter Pack; and Works 8 do not properly parse...9.3 High
- microsoft office, office converter pack, works +2 moreMicrosoft Office 2000 SP3, XP SP3, and 2003 SP2; Office Converter Pack; and Works 8 do not...9.3 High
- microsoft office, office compatibility pack, office excel viewer +1 more +3 moreMicrosoft Office Excel 2000 SP3, 2002 SP3, 2003 SP2 and SP3, and 2007 Gold and SP1; Office Excel...9.3 High
- sun opensolaris, solaris +1 moreUnspecified vulnerability in the pthread_mutex_reltimedlock_np API in Sun Solaris 10 and...4.7 Medium
- mailenableMailEnable Professional 3.5.2 and Enterprise 3.52 allow remote attackers to cause a denial of...5.0 Medium
- f-prot antivirus, scanning engine +1 moreThe scanning engine in F-Prot Antivirus 6.2.1 4252 allows remote attackers to cause a denial of...5.0 Medium
- apple quicklookQuickLook in Apple Mac OS X 10.4.11 and 10.5.4 allows remote attackers to execute arbitrary code...9.3 High
- apple data detectors engineUnspecified vulnerability in Data Detectors Engine in Apple Mac OS X 10.5.4 allows attackers to...7.1 High
- apple coregraphicsUnspecified vulnerability in CoreGraphics in Apple Mac OS X 10.4.11 and 10.5.4 allows remote...9.3 High
- epic games unreal tournament 3Unreal Tournament 3 1.3beta4 and earlier allows remote attackers to cause a denial of service ...5.0 Medium
- emc dantz retrospect backup clientretroclient.exe in EMC Dantz Retrospect Backup Client 7.5.116 allows remote attackers to cause a...5.0 Medium
- winsoftmagic winremotepc full, winremotepc lite +1 moreWRPCServer.exe in WinSoftMagic WinRemotePC (WRPC) Lite 2008 and Full 2008 allows remote attackers...5.0 Medium
- asteriskThe IAX2 protocol implementation in Asterisk Open Source 1.0.x, 1.2.x before 1.2.30, and 1.4.x...7.8 High
- clam anti-virus clamavlibclamav/petite.c in ClamAV before 0.93.3 allows remote attackers to cause a denial of service...5.0 Medium
- yaccskeleton.c in yacc does not properly handle reduction of a rule with an empty right hand side,...7.8 High
- apple safariWebCore in Apple Safari does not properly perform garbage collection of JavaScript document...9.3 High
- webkit javascriptcoreJavaScriptCore in WebKit on Apple iPhone before 2.0 and iPod touch before 2.0 does not properly...6.8 Medium
- Show moreLoading…