CWE-399: Resource Management Errors
Weaknesses in this category are related to improper management of system resources.
From the CWE List. © The MITRE Corporation.
Newest
- apple iphone os, safari, google chrome +2 moreUse-after-free vulnerability in WebKit, as used in Apple Safari before 4.0, iPhone OS 1.0 through...9.3 High
- apple safariThe JavaScript garbage collector in WebKit in Apple Safari before 4.0, iPhone OS 1.0 through 2.2...9.3 High
- apple cupsThe directory-services functionality in the scheduler in CUPS 1.1.17 and 1.1.22 allows remote...5.0 Medium
- strongswancharon/sa/tasks/child_create.c in the charon daemon in strongSWAN before 4.3.1 switches the NULL...5.0 Medium
- strongswancharon/sa/ike_sa.c in the charon daemon in strongSWAN before 4.3.1 allows remote attackers to...5.0 Medium
- apple quicktimeApple QuickTime before 7.6.2 does not properly initialize memory before use in handling movie...9.3 High
- apple quicktimeApple QuickTime before 7.6.2 allows remote attackers to execute arbitrary code or cause a denial...9.3 High
- mozilla firefoxMozilla Firefox 3.0.10 allows remote attackers to cause a denial of service (infinite loop,...5.0 Medium
- mozilla firefoxThe SVG component in Mozilla Firefox 3.0.4 allows remote attackers to cause a denial of service ...5.0 Medium
- xenThe hypervisor_callback function in Xen, possibly before 3.4.0, as applied to the Linux kernel 2...5.0 Medium
- opensslUse-after-free vulnerability in the dtls1_retrieve_buffered_fragment function in ssl/d1_both.c in...5.0 Medium
- ipsec-toolsMultiple memory leaks in Ipsec-tools before 0.7.2 allow remote attackers to cause a denial of...5.0 Medium
- google chromeGoogle Chrome 1.0.154.53 allows remote attackers to cause a denial of service (NULL pointer...5.0 Medium
- microsoft windows xpGDI+ in Microsoft Windows XP SP3 allows remote attackers to cause a denial of service (infinite...7.8 High
- mozilla firefoxThe nsTextFrame::ClearTextRun function in layout/generic/nsTextFrameThebes.cpp in Mozilla Firefox...9.3 High
- adobe readerThe customDictionaryOpen spell method in the JavaScript API in Adobe Reader 9.1, 8.1.4, 7.1.1,...6.8 Medium
- adobe acrobat, acrobat reader +1 moreThe getAnnots Doc method in the JavaScript API in Adobe Reader and Acrobat 9.1, 8.1.4, 7.1.1, and...9.3 High
- sun jdkSpring Framework Inefficient Regular Expression Complexity5.0 Medium
- trendmicro officescanNTRtScan.exe in Trend Micro OfficeScan Client 8.0 SP1 and 8.0 SP1 Patch 1 allows local users to...2.1 Low
- tim hockin acpidACPI Event Daemon (acpid) before 1.0.10 allows remote attackers to cause a denial of service (CPU...5.0 Medium
- apple cups, foolabs xpdf, poppler +1 more +3 moreThe JBIG2 MMR decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6,...4.3 Medium
- apple cups, foolabs xpdf, poppler +1 more +3 moreThe JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and...4.3 Medium
- apple cups, foolabs xpdf, poppler +1 more +3 moreThe JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, Poppler before 0.10.6, and...6.8 Medium
- apple cups, foolabs xpdf, glyphandcog xpdfreader +1 more +3 moreThe JBIG2 decoder in Xpdf 3.02pl2 and earlier, CUPS 1.3.9 and earlier, and other products allows...4.3 Medium
- mozilla firefox, seamonkey, thunderbird +2 moreThe JavaScript engine in Mozilla Firefox before 3.0.9, Thunderbird before 2.0.0.22, and SeaMonkey...5.0 Medium
- mozilla firefox, seamonkey, thunderbird +2 moreThe JavaScript engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird before 2.0.0.22, and...5.0 Medium
- mozilla firefox, seamonkey, thunderbird +2 moreThe browser engine in Mozilla Firefox 3.x before 3.0.9, Thunderbird before 2.0.0.22, and...5.0 Medium
- microsoft internet explorerMicrosoft Internet Explorer 5.01 SP4, 6 SP1, 6 and 7 on Windows XP SP2 and SP3, 6 and 7 on...9.3 High
- microsoft internet explorerMicrosoft Internet Explorer 6 SP1, 6 and 7 on Windows XP SP2 and SP3, 6 and 7 on Windows Server...9.3 High
- microsoft internet explorer, ie +1 moreMicrosoft Internet Explorer 6 SP1, 6 and 7 on Windows XP SP2 and SP3, 6 and 7 on Windows Server...9.3 High
- microsoft office, office excel, office excel viewer +1 more +3 moreMicrosoft Office Excel 2000 SP3, 2002 SP3, 2003 SP3, and 2007 SP1; Excel in Microsoft Office 2004...9.3 High
- massive entertainment wicWorld in Conflict (WIC) 1.008 and earlier allows remote attackers to cause a denial of service ...5.0 Medium
- apple mac os x, mac os x server +1 moreMultiple memory leaks in XNU 1228.3.13 and earlier on Apple Mac OS X 10.5.6 and earlier allow...4.9 Medium
- trendmicro internet securityThe TrendMicro Activity Monitor Module (tmactmon.sys) 2.52.0.1002 in Trend Micro Internet Pro...7.2 High
- cisco iosMemory leak in the Cisco Tunneling Control Protocol (cTCP) encapsulation feature in Cisco IOS 12...7.1 High
- cisco iosThe SSLVPN feature in Cisco IOS 12.3 through 12.4 allows remote attackers to cause a denial of...7.8 High
- mozilla firefoxThe txMozillaXSLTProcessor::TransformToDoc function in Mozilla Firefox before 3.0.8 and SeaMonkey...9.3 High
- geovision liveaudio activex controlUse-after-free vulnerability in the LIVEAUDIO.LiveAudioCtrl.1 ActiveX control in LIVEAU~1.OCX 7.0...9.3 High
- nlnetlabs ldnsHeap-based buffer overflow in the ldns_rr_new_frm_str_internal function in ldns 1.4.x allows...6.4 Medium
- linux kernelThe console selection feature in the Linux kernel 2.6.28 before 2.6.28.4, 2.6.25, and possibly...4.7 Medium
- mozilla firefoxMozilla Firefox 3.0.7 on Windows 7 allows remote attackers to execute arbitrary code via unknown...9.3 High
- solarwinds serv-u file serverThe FTP server in Serv-U 7.0.0.1 through 7.4.0.1 allows remote authenticated users to cause a...4.0 Medium
- sun opensolaris, solaris +1 moreUnspecified vulnerability in the UFS filesystem functionality in Sun OpenSolaris snv_86 through...4.9 Medium
- sun opensolaris, solaris +1 moreUnspecified vulnerability in Sun Solaris 10 on SPARC sun4v systems, and OpenSolaris snv_47...4.7 Medium
- sun opensolaris, solaris +1 moreUnspecified vulnerability in Sun OpenSolaris snv_39 through snv_45, when running in 64-bit mode...4.7 Medium
- postgresqlPostgreSQL before 8.3.7, 8.2.13, 8.1.17, 8.0.21, and 7.4.25 allows remote authenticated users to...4.0 Medium
- opera browserOpera before 9.64 allows remote attackers to execute arbitrary code via a crafted JPEG image that...9.3 High
- wiresharkThe WLCCP dissector in Wireshark 0.99.7 through 1.0.4 allows remote attackers to cause a denial...4.3 Medium
- sun opensolaris, solaris +1 moreMultiple unspecified vulnerabilities in the Doors subsystem in the kernel in Sun Solaris 8...4.9 Medium
- wesnothThe read_game_map function in src/terrain_translation.cpp in Wesnoth before r32987 allows remote...5.0 Medium
- Show moreLoading…