CVEdetails.com the ultimate security vulnerability data source
(e.g.: CVE-2009-1234 or 2010-1234 or 20101234)
Log In   Register   Reset Password   Activate Account
Vulnerability Feeds & WidgetsNew   www.itsecdb.com  

Security Vulnerabilities Published In 2007(Denial Of Service)

CVSS Scores Greater Than: 0   1   2   3   4   5   6   7   8   9  
Copy Results Download Results Select Table
Press ESC to close
# CVE ID CWE ID # of Exploits Vulnerability Type(s) Publish Date Update Date Score Gained Access Level Access Complexity Authentication Conf. Integ. Avail.
1 CVE-2007-6573 20 DoS 2007-12-28 2008-11-15
7.8
 None Remote Low Not required None None Complete
QK SMTP Server 3 allows remote attackers to cause a denial of service (daemon crash) via a long (1) HELO, (2) MAIL FROM, or (3) RCPT TO command; or (4) a long string in the message sent after the DATA command; possibly a related issue to CVE-2006-5551.
2 CVE-2007-6562 119 DoS Overflow 2007-12-27 2008-11-15
5.0
 None Remote Low Not required None None Partial
Multiple stack-based buffer overflows in the use of FD_SET in TCPreen before 1.4.4 allow remote attackers to cause a denial of service via multiple concurrent connections, which result in overflows in the (1) SocketAddress::Connect function in libsolve/sockprot.cpp and (2) monitor_bridge function in src/bridge.cpp.
3 CVE-2007-6558 20 DoS 2007-12-27 2011-05-24
4.3
 None Remote Medium Not required None None Partial
TotalPlayer 3.0 allows user-assisted remote attackers to cause a denial of service (application crash) via a large .m3u file. NOTE: this might be a duplicate of CVE-2006-6288.
4 CVE-2007-6534 20 DoS 2007-12-27 2008-09-05
6.8
 None Remote Medium Not required Partial Partial Partial
Multiple unspecified vulnerabilities in Microsoft Office Publisher allow user-assisted remote attackers to cause a denial of service (application crash) via a crafted PUB file, possibly involving wordart.
5 CVE-2007-6523 399 DoS 2007-12-24 2012-06-07
7.8
 None Remote Low Not required None None Complete
Algorithmic complexity vulnerability in Opera 9.50 beta and 9.x before 9.25 allows remote attackers to cause a denial of service (CPU consumption) via a crafted bitmap (BMP) file that triggers a large number of calculations and checks.
6 CVE-2007-6519 DoS 2007-12-24 2008-09-05
4.9
 None Local Low Not required None None Complete
Unspecified vulnerability in the File-on-File Mounting File System (FFM) in HP Tru64 UNIX 5.1B-4 and 5.1B-3 allows local users to cause a denial of service (system crash) via unspecified vectors.
7 CVE-2007-6509 20 DoS 2007-12-21 2008-09-05
7.8
 None Remote Low Not required None None Complete
Unspecified vulnerability in Appian Enterprise Business Process Management (BPM) Suite 5.6 SP1 allows remote attackers to cause a denial of service via a crafted packet to port 5400/tcp.
8 CVE-2007-6492 20 DoS 2007-12-20 2008-11-15
7.1
 None Remote Medium Not required None None Complete
The IMWeb.IMWebControl.1 ActiveX control in IMWeb.dll 7.0.0.x, and possibly IMWebControl.dll, in iMesh 7.1.0.x and earlier allows remote attackers to cause a denial of service (Internet Explorer 7 crash) via an empty string in the argument to the ProcessRequestEx method.
9 CVE-2007-6482 DoS 2007-12-20 2008-11-15
7.8
 None Remote Low Not required None None Complete
Unspecified vulnerability in the Device Manager daemon (utdevmgrd) in Sun Ray Server Software 2.0, 3.0, 3.1, and 3.1.1 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors.
10 CVE-2007-6478 119 1 DoS Exec Code Overflow 2007-12-20 2011-08-02
6.8
 None Remote Medium Not required Partial Partial Partial
Stack-based buffer overflow in Rosoft Media Player 4.1.7, 4.1.8, and possibly earlier versions allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a long string in a .M3U file. NOTE: some of these details are obtained from third party information.
11 CVE-2007-6468 119 DoS Exec Code Overflow 2007-12-19 2008-11-15
9.3
 None Remote Medium Not required Complete Complete Complete
Buffer overflow in the HuffDecode function in hw_utils/hwrcon/huffman.c and hexenworld/Client/huffman.c in Hammer of Thyrion 1.4.2 allows remote attackers to execute arbitrary code or cause a denial of service via a crafted huffman encoded packet. NOTE: some of these details are obtained from third party information.
12 CVE-2007-6457 119 DoS Overflow 2007-12-19 2008-09-05
5.0
 None Remote Low Not required None None Partial
Stack-based buffer overflow in the webmail feature in SurgeMail 38k4 allows remote attackers to cause a denial of service (crash) via a long Host header.
13 CVE-2007-6454 119 DoS Exec Code Overflow 2007-12-19 2008-09-05
10.0
 None Remote Low Not required Complete Complete Complete
Heap-based buffer overflow in the handshakeHTTP function in servhs.cpp in PeerCast 0.1217 and earlier, and SVN 344 and earlier, allows remote attackers to cause a denial of service and possibly execute arbitrary code via a long SOURCE request.
14 CVE-2007-6451 399 DoS 2007-12-19 2010-08-21
4.3
 None Remote Medium Not required None None Partial
Unspecified vulnerability in the CIP dissector in Wireshark (formerly Ethereal) 0.9.14 to 0.99.6 allows remote attackers to cause a denial of service (crash) via unknown vectors that trigger allocation of large amounts of memory.
15 CVE-2007-6450 DoS 2007-12-19 2010-08-21
5.0
 None Remote Low Not required None None Partial
The RPL dissector in Wireshark (formerly Ethereal) 0.9.8 to 0.99.6 allows remote attackers to cause a denial of service (infinite loop) via unknown vectors.
16 CVE-2007-6441 264 DoS 2007-12-19 2012-08-13
3.3
 None Local Network Low Not required None None Partial
The WiMAX dissector in Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service (crash) via unknown vectors related to "unaligned access on some platforms."
17 CVE-2007-6439 399 DoS 2007-12-19 2012-08-13
6.1
 None Local Network Low Not required None None Complete
Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service (infinite or large loop) via the (1) IPv6 or (2) USB dissector, which can trigger resource consumption or a crash. NOTE: this identifier originally included Firebird/Interbase, but it is already covered by CVE-2007-6116. The DCP ETSI issue is already covered by CVE-2007-6119.
18 CVE-2007-6438 119 DoS Overflow 2007-12-19 2012-08-13
5.0
 None Remote Low Not required None None Partial
Unspecified vulnerability in the SMB dissector in Wireshark (formerly Ethereal) 0.99.6 allows remote attackers to cause a denial of service via unknown vectors. NOTE: this identifier originally included MP3 and NCP, but those issues are already covered by CVE-2007-6111.
19 CVE-2007-6437 20 DoS 2007-12-19 2008-09-05
5.0
 None Remote Low Not required None None Partial
Balabit syslog-ng 2.0.x before 2.0.6 and 2.1.x before 2.1.8 allows remote attackers to cause a denial of service (crash) via a message with a timestamp that does not contain a trailing space, which triggers a NULL pointer dereference.
20 CVE-2007-6419 DoS 2007-12-24 2009-03-04
7.8
 None Remote Low Not required None None Complete
Unspecified vulnerability in rpc.yppasswdd in HP HP-UX B.11.11, B.11.23, and B.11.31 allows remote attackers to cause a denial of service (daemon crash) via unspecified vectors.
21 CVE-2007-6417 399 DoS 2007-12-17 2010-08-21
7.2
 Admin Local Low Not required Complete Complete Complete
The shmem_getpage function (mm/shmem.c) in Linux kernel 2.6.11 through 2.6.23 does not properly clear allocated memory in some rare circumstances related to tmpfs, which might allow local users to read sensitive kernel data or cause a denial of service (crash).
22 CVE-2007-6411 119 DoS Exec Code Overflow 2007-12-17 2008-09-05
4.3
 None Remote Medium Not required None None Partial
Multiple buffer overflows in the HandleEmotsConfig function in the GG Client in Gadu-Gadu 7.7 Build 3669 allow user-assisted remote attackers to execute arbitrary code or cause a denial of service (gg.exe process crash) via a long string in an emots.txt file.
23 CVE-2007-6410 352 DoS CSRF 2007-12-17 2008-09-05
4.3
 None Remote Medium Not required None Partial None
Gadu-Gadu does not properly perform protocol handling, which allows remote attackers to conduct cross-site request forgery (CSRF) attacks and add arbitrary user accounts or cause a denial of service as administrators via an unspecified "crafted link," possibly related to the gg protocol.
24 CVE-2007-6409 16 DoS 2007-12-17 2008-09-05
4.3
 None Remote Medium Not required None None Partial
The gg protocol handler in Gadu-Gadu, when this product is installed but not running, does not properly handle the skin attribute, which allows remote attackers to cause a denial of service (resource consumption) via unspecified network traffic.
25 CVE-2007-6386 119 DoS Overflow +Priv 2007-12-14 2008-11-15
7.2
 Admin Local Low Not required Complete Complete Complete
Stack-based buffer overflow in PccScan.dll before build 1451 in Trend Micro AntiVirus plus AntiSpyware 2008, Internet Security 2008, and Internet Security Pro 2008 allows user-assisted remote attackers to cause a denial of service (SfCtlCom.exe crash), and allows local users to gain privileges, via a malformed .zip archive with a long name, as demonstrated by a .zip file created via format string specifiers in a crafted .uue file.
26 CVE-2007-6372 20 DoS 2007-12-14 2011-04-29
7.8
 None Remote Low Not required None None Complete
Unspecified vulnerability in Juniper JUNOS 7.3 through 8.4 allows remote attackers to cause a denial of service (crash) via malformed BGP packets, possibly BGP UPDATE packets that trigger session flapping.
27 CVE-2007-6371 20 DoS 2007-12-14 2008-09-05
7.1
 None Remote Medium Not required None None Complete
Nokia N95 cell phone with RM-159 12.0.013 firmware allows remote attackers to cause a denial of service (device inoperability) via a SIP INVITE message accompanied by an immediately subsequent SIP CANCEL message, followed by a second SIP INVITE message in a different session.
28 CVE-2007-6360 DoS 2007-12-14 2008-11-15
7.8
 None Remote Low Not required None None Complete
Unspecified vulnerability in the Sun eXtended System Control Facility (XSCF) Control Package (XCP) firmware before 1050 on SPARC Enterprise M4000, M5000, M8000, and M9000 servers allows remote attackers to cause a denial of service (reboot) via (1) telnet, (2) ssh, or (3) http network traffic that triggers memory exhaustion.
29 CVE-2007-6359 189 DoS 2007-12-14 2008-09-05
4.9
 None Local Low Not required None None Complete
The cs_validate_page function in bsd/kern/ubc_subr.c in the xnu kernel 1228.0 and earlier in Apple Mac OS X 10.5.1 allows local users to cause a denial of service (failed assertion and system crash) via a crafted signed Mach-O binary that causes the hashes function to return NULL.
30 CVE-2007-6356 399 DoS 2007-12-18 2008-09-05
5.0
 None Remote Low Not required None None Partial
exiftags before 1.01 allows attackers to cause a denial of service (infinite loop) via recursive IFD references in the EXIF data in a JPEG image.
31 CVE-2007-6351 DoS 2007-12-19 2011-10-11
4.3
 None Remote Medium Not required None None Partial
libexif 0.6.16 and earlier allows context-dependent attackers to cause a denial of service (infinite recursion) via an image file with crafted EXIF tags, possibly involving the exif_loader_write function in exif_loader.c.
32 CVE-2007-6349 399 DoS 2007-12-20 2008-09-05
7.8
 None Remote Low Not required None None Complete
P4Webs.exe in Perforce P4Web 2006.2 and earlier, when running on Windows, allows remote attackers to cause a denial of service (CPU consumption) via an HTTP request with an empty body and a Content-Length greater than 0.
33 CVE-2007-6341 119 DoS Overflow 2007-12-20 2008-09-05
5.0
 None Remote Low Not required None None Partial
Net/DNS/RR/A.pm in Net::DNS 0.60 build 654, as used in packages such as SpamAssassin and OTRS, allows remote attackers to cause a denial of service (program "croak") via a crafted DNS response.
34 CVE-2007-6326 20 1 DoS 2007-12-13 2008-09-05
5.0
 None Remote Low Not required None None Partial
Sergey Lyubka Simple HTTPD (shttpd) 1.3 on Windows allows remote attackers to cause a denial of service via a request that includes an MS-DOS device name, as demonstrated by the /aux URI.
35 CVE-2007-6315 119 DoS Overflow 2007-12-11 2008-09-05
4.0
 None Remote Low Single system None None Partial
Group Chat in BarracudaDrive Web Server before 3.8 allows remote authenticated users to cause a denial of service (crash) via a HTTP request to /eh/chat.ehintf/C. that does not contain a Connection ID, which results in a NULL pointer dereference.
36 CVE-2007-6304 DoS 2007-12-10 2012-11-05
5.0
 None Remote Low Not required None None Partial
The federated engine in MySQL 5.0.x before 5.0.51a, 5.1.x before 5.1.23, and 6.0.x before 6.0.4, when performing a certain SHOW TABLE STATUS query, allows remote MySQL servers to cause a denial of service (federated handler crash and daemon crash) via a response that lacks the minimum required number of columns.
37 CVE-2007-6283 200 DoS +Info 2007-12-17 2010-08-21
4.9
 None Local Low Not required None None Complete
Red Hat Enterprise Linux 5 and Fedora install the Bind /etc/rndc.key file with world-readable permissions, which allows local users to perform unauthorized named commands, such as causing a denial of service by stopping named.
38 CVE-2007-6276 189 1 DoS 2007-12-07 2011-07-18
7.8
 None Remote Low Not required None None Complete
The accept_connections function in the virtual private network daemon (vpnd) in Apple Mac OS X 10.5 before 10.5.4 allows remote attackers to cause a denial of service (divide-by-zero error and daemon crash) via a crafted load balancing packet to UDP port 4112.
39 CVE-2007-6263 20 DoS 2007-12-06 2009-09-15
9.3
 Admin Remote Medium Not required Complete Complete Complete
The dataconn function in ftpd.c in netkit ftpd (netkit-ftpd) 0.17, when certain modifications to support SSL have been introduced, calls fclose on an uninitialized file stream, which allows remote attackers to cause a denial of service (daemon crash) and possibly have unspecified other impact via some types of FTP over SSL protocol behavior, as demonstrated by breaking a passive FTP DATA connection in a way that triggers an error in the server's SSL_accept function. NOTE: the netkit ftp issue is covered by CVE-2007-5769.
40 CVE-2007-6261 189 DoS Overflow 2007-12-05 2008-09-05
4.9
 None Local Low Not required None None Complete
Integer overflow in the load_threadstack function in the Mach-O loader (mach_loader.c) in the xnu kernel in Apple Mac OS X 10.4 through 10.5.1 allows local users to cause a denial of service (infinite loop) via a crafted Mach-O binary.
41 CVE-2007-6239 20 DoS 2007-12-04 2010-08-21
5.0
 None Remote Low Not required None None Partial
The "cache update reply processing" functionality in Squid 2.x before 2.6.STABLE17 and Squid 3.0 allows remote attackers to cause a denial of service (crash) via unknown vectors related to HTTP headers and an Array memory leak during requests for cached objects.
42 CVE-2007-6236 189 1 DoS 2007-12-04 2008-11-15
5.0
 None Remote Low Not required None None Partial
Microsoft Windows Media Player (WMP) allows remote attackers to cause a denial of service (application crash) via a certain AIFF file that triggers a divide-by-zero error, as demonstrated by kr.aiff.
43 CVE-2007-6235 20 1 DoS 2007-12-04 2008-09-05
5.0
 None Remote Low Not required None None Partial
A certain ActiveX control in RealNetworks RealPlayer 11 allows remote attackers to cause a denial of service (application crash) via a malformed .au file that triggers a divide-by-zero error. NOTE: this might be related to CVE-2007-4904.
44 CVE-2007-6228 119 DoS Overflow 2007-12-04 2008-09-05
6.8
 None Remote Medium Not required Partial Partial Partial
Stack-based buffer overflow in the Helper class in the yt.ythelper.2 ActiveX control in Yahoo! Toolbar 1.4.1 allows remote attackers to cause a denial of service (browser crash) via a long argument to the c method.
45 CVE-2007-6225 DoS 2007-12-04 2008-11-15
4.9
 None Local Low Not required None None Complete
Unspecified vulnerability in Sun Solaris 10, when 64bit mode is used on the x86 platform, allows local users in a Linux (lx) branded zone to cause a denial of service (panic) via unspecified vectors.
46 CVE-2007-6224 20 DoS 2007-12-04 2008-09-05
5.0
 None Remote Low Not required None None Partial
The RealNetworks RealAudioObjects.RealAudio ActiveX control in rmoc3260.dll, as shipped with RealPlayer 11, allows remote attackers to cause a denial of service (browser crash) via a certain argument to the GetSourceTransport method.
47 CVE-2007-6220 189 DoS 2007-12-04 2008-09-05
5.0
 None Remote Low Not required None None Partial
typespeed before 0.6.4 allows remote attackers to cause a denial of service (application crash) via unspecified network behavior that triggers a divide-by-zero error.
48 CVE-2007-6216 362 DoS 2007-12-04 2008-11-15
4.7
 None Local Medium Not required None None Complete
Race condition in the Fibre Channel protocol (fcp) driver and Devices filesystem (devfs) in Sun Solaris 10 allows local users to cause a denial of service (system hang) via some programs that access hardware resources, as demonstrated by the (1) cfgadm and (2) format programs.
49 CVE-2007-6201 DoS Exec Code 2007-12-01 2011-03-15
7.5
 None Remote Low Not required Partial Partial Partial
Unspecified vulnerability in Wesnoth 1.2.x before 1.2.8, and 1.3.x before 1.3.12, allows attackers to cause a denial of service (hang) via a "faulty add-on" and possibly execute other commands via unknown vectors related to the turn_cmd option.
50 CVE-2007-6195 119 DoS Exec Code Overflow 2007-12-14 2011-05-13
10.0
 None Remote Low Not required Complete Complete Complete
Buffer overflow in the sw_rpc_agent_init function in swagentd in Software Distributor (SD), and possibly other DCE applications, in HP HP-UX B.11.11 and B.11.23 allows remote attackers to execute arbitrary code or cause a denial of service via malformed arguments in an opcode 0x04 DCE RPC request.
Total number of vulnerabilities : 1100   Page : 1 (This Page)2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22
CVE is a registred trademark of the MITRE Corporation and the authoritative source of CVE content is MITRE's CVE web site. CWE is a registred trademark of the MITRE Corporation and the authoritative source of CWE content is MITRE's CWE web site. OVAL is a registered trademark of The MITRE Corporation and the authoritative source of OVAL content is MITRE's OVAL web site.
Use of this information constitutes acceptance for use in an AS IS condition. There are NO warranties, implied or otherwise, with regard to this information or its use. Any use of this information is at the user's risk. It is the responsibility of user to evaluate the accuracy, completeness or usefulness of any information, opinion, advice or other content. EACH USER WILL BE SOLELY RESPONSIBLE FOR ANY consequences of his or her direct or indirect use of this web site. ALL WARRANTIES OF ANY KIND ARE EXPRESSLY DISCLAIMED. This site will NOT BE LIABLE FOR ANY DIRECT, INDIRECT or any other kind of loss.