CWE-399: Resource Management Errors
Weaknesses in this category are related to improper management of system resources.
From the CWE List. © The MITRE Corporation.
Newest
- wesnothThe uncompress_buffer function in src/server/simple_wml.cpp in Wesnoth before r33069 allows...4.3 Medium
- sun opensolaris, solaris +1 moreThe NFSv4 Server module in the kernel in Sun Solaris 10, and OpenSolaris before snv_111, allow...4.7 Medium
- sun opensolaris, sunos +1 moreThe crypto pseudo device driver in Sun Solaris 10, and OpenSolaris snv_88 through snv_102, does...4.9 Medium
- mozilla firefoxMozilla Firefox 2.0.0.20 and earlier allows remote attackers to cause a denial of service ...5.0 Medium
- mozilla firefox, seamonkey, thunderbird +2 moreDouble free vulnerability in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and...10.0 High
- mozilla firefox, seamonkey, thunderbird +2 moreThe layout engine in Mozilla Firefox 2 and 3 before 3.0.7, Thunderbird before 2.0.0.21, and...9.3 High
- mozilla firefox, seamonkey, thunderbird +2 moreThe JavaScript engine in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey...10.0 High
- mozilla firefox, seamonkey, thunderbird +2 moreThe layout engine in Mozilla Firefox 2 and 3 before 3.0.7, Thunderbird before 2.0.0.21, and...9.3 High
- mozilla firefox, seamonkey, thunderbird +2 moreThe layout engine in Mozilla Firefox before 3.0.7, Thunderbird before 2.0.0.21, and SeaMonkey 1.1...10.0 High
- qipQIP 2005 build 8082 allows remote attackers to cause a denial of service (CPU consumption and...4.3 Medium
- avahi avahi-daemonThe originates_from_local_legacy_unicast_socket function in avahi-core/server.c in avahi-daemon 0...7.8 High
- yawsYaws before 1.80 allows remote attackers to cause a denial of service (memory consumption and...5.0 Medium
- linux kernelThe ext4_isize function in fs/ext4/ext4.h in the Linux kernel 2.6.27 before 2.6.27.19 and 2.6.28...4.9 Medium
- emc networker server, networker client, networker module +2 more +4 morensrexecd.exe in multiple EMC Networker products including EMC NetWorker Server, Storage Node, and...7.8 High
- libpngMemory leak in the png_handle_tEXt function in pngrutil.c in libpng before 1.2.33 rc02 and 1.4.0...7.1 High
- microsoft windowsMemory leak in the DNS server in Microsoft Windows allows remote attackers to cause a denial of...7.8 High
- ibm websphere application serverUnspecified vulnerability in the Performance Monitoring Infrastructure (PMI) feature in the...5.0 Medium
- avaya ip soft phoneUnspecified vulnerability in Avaya IP Softphone 6.0 SP4 and 6.01.85 allows remote attackers to...5.0 Medium
- apple mac os x, mac os x server +1 moreUnspecified vulnerability in the SMB component in Apple Mac OS X 10.4.11 and 10.5.6 allows remote...9.3 High
- apple mac os x, mac os x server +1 moreUnspecified vulnerability in CarbonCore in Apple Mac OS X 10.4.11 and 10.5.6 allows remote...7.8 High
- microsoft exchange serverMicrosoft Exchange 2000 Server SP3, Exchange Server 2003 SP2, and Exchange Server 2007 SP1 do not...9.3 High
- microsoft visioMicrosoft Office Visio 2002 SP2 and 2003 SP3 does not properly validate memory allocation for...9.3 High
- microsoft visioMicrosoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 does not properly perform memory copy...9.3 High
- microsoft visioMicrosoft Office Visio 2002 SP2, 2003 SP3, and 2007 SP1 does not properly validate object data in...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 7, when XHTML strict mode is used, allows remote attackers to execute...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 7 does not properly handle errors during attempted access to deleted...9.3 High
- linux kernelThe (1) sys32_mremap function in arch/sparc64/kernel/sys_sparc32.c, the (2) sparc_mmap_check...4.9 Medium
- goahead webserverGoAhead WebServer before 2.1.1 allows remote attackers to cause a denial of service (CPU...5.0 Medium
- southrivertech titan ftp serverTitan FTP Server 6.26 build 630 allows remote attackers to cause a denial of service (CPU...5.0 Medium
- mozilla firefox, seamonkey, thunderbird +2 moreUnspecified vulnerability in Mozilla Firefox 3.x before 3.0.6, Thunderbird before 2.0.0.21, and...10.0 High
- mozilla firefox, seamonkey, thunderbird +2 moreMultiple unspecified vulnerabilities in Mozilla Firefox 3.x before 3.0.6, Thunderbird before 2.0...10.0 High
- torUnspecified vulnerability in Tor before 0.2.0.33 has unspecified impact and remote attack vectors...10.0 High
- sun opensolaris, solaris +1 moreUnspecified vulnerability in the NFSv4 client module in the kernel on Sun Solaris 10 and...5.4 Medium
- debian linux, linux kernel, canonical ubuntu linux +2 moredrivers/firmware/dell_rbu.c in the Linux kernel before 2.6.27.13, and 2.6.28.x before 2.6.28.2,...4.9 Medium
- gdata antivirus 2008, internetsecurity 2008, totalcare 2008 +2 moreThe GDTdiIcpt.sys driver in G DATA AntiVirus 2008, InternetSecurity 2008, and TotalCare 2008...7.2 High
- openoffice openoffice.orgThe Word processor in OpenOffice.org 1.1.2 through 1.1.5 allows remote attackers to cause a...9.3 High
- apple quicktimeUnspecified vulnerability in Apple QuickTime before 7.6 allows remote attackers to cause a denial...9.3 High
- linux kernelMemory leak in the keyctl_join_session_keyring function (security/keys/keyctl.c) in Linux kernel...4.9 Medium
- research in motion limited blackberry enterprise server, blackberry professional software, blackberry unite +2 moreThe PDF distiller in the Attachment Service in Research in Motion (RIM) BlackBerry Enterprise...9.3 High
- vmware ace, fusion, server +2 more +4 morevmwarebase.dll, as used in the vmware-authd service (aka vmware-authd.exe), in VMware Workstation...5.0 Medium
- mozilla firefoxMozilla Firefox 3.0.5 and earlier 3.0.x versions, when designMode is enabled, allows remote...2.6 Low
- sun opensolaris, solaris +1 moreUnspecified vulnerability in the nfs4rename_persistent_fh function in the NFS 4 (aka NFSv4)...4.9 Medium
- mozilla libxulMemory leak in Libxul, as used in Mozilla Firefox 3.0.5 and other products, allows remote...5.0 Medium
- apple safariMemory leak in WebKit.dll in WebKit, as used by Apple Safari 3.2 on Windows Vista SP1, allows...5.0 Medium
- f-prot antivirusF-Prot 4.6.8 for GNU/Linux allows remote attackers to bypass anti-virus protection via a crafted...5.0 Medium
- pgp desktopThe PGPwded device driver (aka PGPwded.sys) in PGP Corporation PGP Desktop 9.0.6 build 6060 and 9...4.9 Medium
- linux kernelThe __qdisc_run function in net/sched/sch_generic.c in the Linux kernel before 2.6.25 on SMP...4.9 Medium
- kvm qumranet kvm, qemu +1 moreThe protocol_client_msg function in vnc.c in the VNC server in (1) Qemu 0.9.1 and earlier and (2)...5.0 Medium
- trend micro housecallUse-after-free vulnerability in the Trend Micro HouseCall ActiveX control 6.51.0.1028 and 6.6.0...9.3 High
- linux kernellibata in the Linux kernel before 2.6.27.9 does not set minimum timeouts for SG_IO requests,...1.9 Low
- Show moreLoading…