CWE-399: Resource Management Errors
Weaknesses in this category are related to improper management of system resources.
From the CWE List. © The MITRE Corporation.
Newest
- kde konquerorHTMLTokenizer::scriptHandler in Konqueror in KDE 3.5.9 and 3.5.10 allows remote attackers to...4.3 Medium
- sun opensolaris, solaris +1 moretun in IP Tunnel in Solaris 10 and OpenSolaris snv_01 through snv_76 allows local users to cause...7.2 High
- sun opensolaris, solaris +1 moreUnspecified vulnerability in the X Inter Client Exchange library (aka libICE) in Sun Solaris 8...5.0 Medium
- operaThe HTML parsing engine in Opera before 9.63 allows remote attackers to execute arbitrary code...9.3 High
- virusblokada vba32 personal antivirusThe scanning engine in VirusBlokAda VBA32 Personal Antivirus 3.12.8.x allows remote attackers to...5.0 Medium
- wftpserver winftp ftp serverWinFTP FTP Server 2.3.0, when passive (aka PASV) mode is used, allows remote authenticated users...3.5 Low
- mozilla firefox, seamonkey, canonical ubuntu linux +2 moreThe layout engine in Mozilla Firefox 3.x before 3.0.5, Thunderbird 2.x before 2.0.0.19, and...5.0 Medium
- mozilla firefox, seamonkey, thunderbird +2 more +4 moreThe layout engine in Mozilla Firefox 3.x before 3.0.5 and 2.x before 2.0.0.19, Thunderbird 2.x...10.0 High
- sun opensolaris, solaris +1 moreThe IPv4 Forwarding feature in Sun Solaris 10 and OpenSolaris snv_47 through snv_82, with certain...5.4 Medium
- dxmsoft xm easy personal ftp serverXM Easy Personal FTP Server 5.6.0 allows remote authenticated users to cause a denial of service...4.0 Medium
- roundcube webmailRoundCube Webmail (roundcubemail) before 0.2-beta allows remote attackers to cause a denial of...7.8 High
- avahiThe originates_from_local_legacy_unicast_socket function (avahi-core/server.c) in avahi-daemon in...5.0 Medium
- apple mac os x, mac os x server +1 moreApple Type Services (ATS) in Apple Mac OS X 10.5 before 10.5.6 allows remote attackers to cause a...7.1 High
- apple mac os x, mac os x server +1 morenatd in network_cmds in Apple Mac OS X before 10.5.6, when Internet Sharing is enabled, allows...7.1 High
- apple mac os x, mac os x server +1 moreThe strptime API in Libsystem in Apple Mac OS X before 10.5.6 allows context-dependent attackers...10.0 High
- apple mac os x, mac os x server +1 moreThe kernel in Apple Mac OS X before 10.5.6 allows local users to cause a denial of service ...4.9 Medium
- aruba networks mobility controller, arubanetworks aruba mobility controller, aruba networks mobility controllers +2 moreAruba Mobility Controller 2.4.8.x-FIPS, 2.5.x, 3.1.x, 3.2.x, 3.3.1.x, and 3.3.2.x allows remote...7.8 High
- mozilla thunderbirdMozilla Thunderbird 2.0.14 does not properly handle (1) multipart/mixed e-mail messages with many...4.3 Medium
- incredimailIncredimail build 5853710 does not properly handle (1) multipart/mixed e-mail messages with many...4.3 Medium
- operaOpera 9.51 on Windows XP does not properly handle (1) multipart/mixed e-mail messages with many...4.3 Medium
- symantec norton internet security 2008Norton Antivirus in Norton Internet Security 15.5.0.23 does not properly handle (1) multipart...4.3 Medium
- kaspersky lab internet security suiteKaspersky Internet Security Suite 2009 does not properly handle (1) multipart/mixed e-mail...4.3 Medium
- eset nod32 antivirusESet NOD32 2.70.0039.0000 does not properly handle (1) multipart/mixed e-mail messages with many...4.3 Medium
- microsoft outlook expressThe MimeOleClearDirtyTree function in InetComm.dll in Microsoft Outlook Express 6.00.2900.5512...4.3 Medium
- netwin smsgateThe SSL web administration service in NetWin SmsGate 1.1n and earlier allows remote attackers to...5.0 Medium
- microsoft internet explorerUse-after-free vulnerability in the CRecordInstance::TransferToDestination function in mshtml.dll...9.3 High
- microsoft wordpadThe WordPad Text Converter for Word 97 files in Microsoft Windows 2000 SP4, XP SP2, and Server...9.3 High
- microsoft windows vista, windows server 2008 +1 moreThe search-ms protocol handler in Windows Explorer in Microsoft Windows Vista Gold and SP1 and...8.5 High
- microsoft windows vista, windows server 2008 +1 moreThe Windows Search component in Microsoft Windows Vista Gold and SP1 and Server 2008 does not...8.5 High
- microsoft excel, excel viewer, office +1 more +3 moreArray index vulnerability in Microsoft Office Excel 2000 SP3, 2002 SP3, and 2003 SP3; Excel...9.3 High
- microsoft office, office excel, office compatibility pack for word excel ppt 2007 +2 more +4 moreMicrosoft Office Excel 2000 SP3 allows remote attackers to execute arbitrary code via a crafted...9.3 High
- microsoft office, office excel, open xml file format converter +2 more +4 moreMicrosoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Excel Viewer 2003...9.3 High
- microsoft internet explorerStack-based buffer overflow in Microsoft Internet Explorer 5.01 SP4, 6 SP1 on Windows 2000, and 6...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 7 sometimes attempts to access a deleted object, which allows remote...8.5 High
- microsoft internet explorerMicrosoft Internet Explorer 7 sometimes attempts to access uninitialized memory locations, which...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 5.01 SP4 and 6 SP1 does not properly validate parameters during calls...8.5 High
- microsoft visual basic, visual foxpro, visual studio .net +2 more +4 moreThe Charts ActiveX control in Microsoft Visual Basic 6.0, Visual Studio .NET 2002 SP1 and 2003...8.5 High
- microsoft office frontpage, project, visual basic +2 more +4 moreThe FlexGrid ActiveX control in Microsoft Visual Basic 6.0, Visual FoxPro 8.0 SP1 and 9.0 SP1 and...8.5 High
- microsoft office, office word, open xml file format converter +4 more +6 moreMicrosoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and...9.3 High
- microsoft office, office word, office compatibility pack for word excel ppt 2007 +4 more +6 moreMicrosoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Outlook 2007 Gold and...9.3 High
- microsoft office, office word, office compatibility pack for word excel ppt 2007 +4 more +6 moreDouble free vulnerability in Microsoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold...9.3 High
- microsoft office, office word, open xml file format converter +4 more +6 moreMicrosoft Office Word 2000 SP3, 2002 SP3, 2003 SP3, and 2007 Gold and SP1; Word Viewer 2003 Gold...9.3 High
- cerulean studios trillian, trillian pro +1 moreDouble free vulnerability in the XML parser in Trillian before 3.1.12.0 allows remote attackers...10.0 High
- linux kernelnet/atm/svc.c in the ATM subsystem in the Linux kernel 2.6.27.8 and earlier allows local users to...4.9 Medium
- vmware esx, esxi, player +2 more +4 moreUnspecified vulnerability in VMware Workstation 5.5.8 and earlier, and 6.0.5 and earlier 6.x...7.2 High
- ruby-lang rubyWEBrick Denial of Service Vulnerability7.8 High
- adobe air, flash player +1 moreThe ActionScript 2 virtual machine in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9...4.3 Medium
- adobe air, flash player +1 moreThe ActionScript 2 virtual machine in Adobe Flash Player 10.x before 10.0.12.36 and 9.x before 9...4.3 Medium
- clam anti-virus clamavStack consumption vulnerability in libclamav/special.c in ClamAV before 0.94.2 allows remote...4.3 Medium
- linux kernelLinux kernel 2.6.28 allows local users to cause a denial of service ("soft lockup" and process...4.9 Medium
- Show moreLoading…