Resource Management Errors — CVEs by weakness type

Subversion MEDIUM 6.8

CVE-2010-4539EPSS 5%

The walk function in repos.c in the mod_dav_svn module for the Apache HTTP Server, as distributed in Apache Subversion before 1.6.15, allows remote a…

Fix: after 1.6.14

Fix from $1,600 2011-01-07

iOS MEDIUM 6.8

CVE-2009-5040

CallManager Express (CME) on Cisco IOS before 15.0(1)XA allows remote authenticated users to cause a denial of service (device crash) by using an ext…

Fix: after 15.0xa

Fix from $1,600 2011-01-07

Adaptive Security Appliance Software HIGH 7.8

CVE-2010-4674

Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2(4) and earlier allows remote attackers to…

Fix: after 8.2

Fix from $1,950 2011-01-07

Adaptive Security Appliance Software MEDIUM 6.8

CVE-2010-4676

Unspecified vulnerability on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) allows remote authenticated use…

Fix: after 8.2

Fix from $1,600 2011-01-07

Adaptive Security Appliance Software MEDIUM 5.0

CVE-2010-4677

emWEB on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) allows remote attackers to cause a denial of servic…

Fix: after 8.2

Fix from $1,600 2011-01-07

Adaptive Security Appliance Software HIGH 7.8

CVE-2010-4682

Memory leak on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) allows remote attackers to cause a denial of …

Fix: after 8.2

Fix from $1,950 2011-01-07

Windows 2003 Server HIGH 7.8

CVE-2010-4669EPSS 29%

The Neighbor Discovery (ND) protocol implementation in the IPv6 stack in Microsoft Windows XP, Windows Server 2003, Windows Vista, Windows Server 200…

No fix yet

Fix from $1,950 2011-01-07

Adaptive Security Appliance Software HIGH 7.8

CVE-2010-4670

The Neighbor Discovery (ND) protocol implementation in the IPv6 stack on Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8…

Fix: after 8.2

Fix from $1,950 2011-01-07

Adaptive Security Appliance Software HIGH 7.8

CVE-2010-4672

Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2(3) and earlier allow remote attackers to cause a denial of service (bl…

Fix: after 8.2

Fix from $1,950 2011-01-07

Adaptive Security Appliance Software HIGH 7.8

CVE-2010-4673

Cisco Adaptive Security Appliances (ASA) 5500 series devices with software 8.2(4) and earlier allow remote attackers to cause a denial of service via…

Fix: after 8.2

Fix from $1,950 2011-01-07

Adaptive Security Appliance Software MEDIUM 5.0

CVE-2009-5037

Cisco Adaptive Security Appliances (ASA) 5500 series devices with software before 8.2(3) allow remote attackers to cause a denial of service (ASDM sy…

Fix: after 8.2

Fix from $1,600 2011-01-07

Mhonarc MEDIUM 5.0

CVE-2010-1677EPSS 9%

MHonArc 2.6.16 allows remote attackers to cause a denial of service (CPU consumption) via start tags that are placed within other start tags, as demo…

Mitigation only

Fix from $1,600 2011-01-03

Airport Express Base Station Firmware MEDIUM 6.1

CVE-2009-2189

The ICMPv6 implementation on the Apple Time Capsule, AirPort Extreme Base Station, and AirPort Express Base Station with firmware before 7.5.2 does n…

Fix: after 7.4.2

Fix from $1,600 2010-12-22

Collectd MEDIUM 5.0

CVE-2010-4336

The cu_rrd_create_file function (src/utils_rrdcreate.c) in collectd 4.x before 4.9.4 and before 4.10.2 allow remote attackers to cause a denial of se…

Mitigation only

Fix from $1,600 2010-12-17

Lotus Notes Traveler MEDIUM 5.0

CVE-2010-4552

Memory leak in IBM Lotus Notes Traveler before 8.5.1.1 allows remote attackers to cause a denial of service (memory consumption and daemon outage) by…

Fix: after 8.5.0.2

Fix from $1,600 2010-12-16

Windows 2003 Server HIGH 7.3

CVE-2010-3957

Double free vulnerability in the OpenType Font (OTF) driver in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 and SP2, …

Mitigation only

Fix from $1,950 2010-12-16

Windows 2003 Server HIGH 7.2

CVE-2010-3940

Double free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 an…

Mitigation only

Fix from $1,950 2010-12-16

Windows 2003 Server HIGH 8.4

CVE-2010-3941

Double free vulnerability in win32k.sys in the kernel-mode drivers in Microsoft Windows XP SP2 and SP3, Windows Server 2003 SP2, Windows Vista SP1 an…

Mitigation only

Fix from $1,950 2010-12-16

Realplayer HIGH 9.3

CVE-2010-2997EPSS 6%

Use-after-free vulnerability in RealNetworks RealPlayer 11.0 through 11.1, RealPlayer SP 1.0 through 1.0.1, Mac RealPlayer 11.0 through 11.1, Linux R…

Mitigation only

Fix from $1,950 2010-12-14

Firefox HIGH 9.3

CVE-2010-3766EPSS 7%

Use-after-free vulnerability in Mozilla Firefox before 3.5.16 and 3.6.x before 3.6.13, and SeaMonkey before 2.0.11, allows remote attackers to execut…

Fix: after 3.5.15

Fix from $1,950 2010-12-10

Chrome HIGH 9.3

CVE-2010-4486

Use-after-free vulnerability in Google Chrome before 8.0.552.215 allows remote attackers to cause a denial of service or possibly have unspecified ot…

Fix: after 8.0.552.214

Fix from $1,950 2010-12-07

Wireshark MEDIUM 5.0

CVE-2010-4301EPSS 9%

epan/dissectors/packet-zbee-zcl.c in the ZigBee ZCL dissector in Wireshark 1.4.0 through 1.4.1 allows remote attackers to cause a denial of service (…

Patch available

Fix from $1,600 2010-11-26

Wireshark MEDIUM 5.0

CVE-2010-3445

Stack consumption vulnerability in the dissect_ber_unknown function in epan/dissectors/packet-ber.c in the BER dissector in Wireshark 1.4.x before 1.…

No fix yet

Fix from $1,600 2010-11-26

Safari HIGH 9.3

CVE-2010-3823EPSS 6%

Use-after-free vulnerability in WebKit in Apple Safari before 5.0.3 on Mac OS X 10.5 through 10.6 and Windows, and before 4.1.3 on Mac OS X 10.4, all…

Fix: after 5.0.2