5

CVE-2009-3276

Exploit
Zoran/WinFormsAdvansed/RegeularDataToXML/Form1.cs in WinFormsAdvansed in NASD CORE.NET Terelik (aka corenet1) allows context-dependent attackers to cause a denial of service (CPU consumption) via an input string composed of many alphabetic characters followed by a ! (exclamation point), related to a certain regular expression, aka a "ReDoS" vulnerability.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Nasd ≫ Corenet1 Version 1.2
Nasd ≫ Corenet1 Version 1.7
Nasd ≫ Corenet1 Version 1.8
Nasd ≫ Corenet1 Version 1.9
Nasd ≫ Corenet1 Version 1.10
Nasd ≫ Corenet1 Version 1.12
Nasd ≫ Corenet1 Version 1.13
Nasd ≫ Corenet1 Version 1.15
Nasd ≫ Corenet1 Version 1.17
Nasd ≫ Corenet1 Version 1.18
Nasd ≫ Corenet1 Version 1.19
Nasd ≫ Corenet1 Version 1.24
Nasd ≫ Corenet1 Version 2.7
Nasd ≫ Corenet1 Version 2.8
Nasd ≫ Corenet1 Version 2.9
Nasd ≫ Corenet1 Version 2.11
Nasd ≫ Corenet1 Version 2.12
Nasd ≫ Corenet1 Version 2.13
Nasd ≫ Corenet1 Version 2.14
Nasd ≫ Corenet1 Version 2.15
Nasd ≫ Corenet1 Version 2.16
Nasd ≫ Corenet1 Version 2.17
Nasd ≫ Corenet1 Version 2.18
Nasd ≫ Corenet1 Version 2.19
Nasd ≫ Corenet1 Version 3.2
Nasd ≫ Corenet1 Version 3.11
Nasd ≫ Corenet1 Version 3.12
Nasd ≫ Corenet1 Version 3.13
Nasd ≫ Corenet1 Version 3.14
Nasd ≫ Corenet1 Version 3.15
Nasd ≫ Corenet1 Version 3.16
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.97% 0.572
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
NIST 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.
http://www.checkmarx.com/Upload/Documents/PDF/Checkmarx_OWASP_IL_2009_ReDoS.pdf
Exploit
http://www.securityfocus.com/archive/1/506419/100/0/threaded