5

CVE-2009-3276

Exploit
Zoran/WinFormsAdvansed/RegeularDataToXML/Form1.cs in WinFormsAdvansed in NASD CORE.NET Terelik (aka corenet1) allows context-dependent attackers to cause a denial of service (CPU consumption) via an input string composed of many alphabetic characters followed by a ! (exclamation point), related to a certain regular expression, aka a "ReDoS" vulnerability.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Nasd ≫ Corenet1 Version1.2
Nasd ≫ Corenet1 Version1.7
Nasd ≫ Corenet1 Version1.8
Nasd ≫ Corenet1 Version1.9
Nasd ≫ Corenet1 Version1.10
Nasd ≫ Corenet1 Version1.12
Nasd ≫ Corenet1 Version1.13
Nasd ≫ Corenet1 Version1.15
Nasd ≫ Corenet1 Version1.17
Nasd ≫ Corenet1 Version1.18
Nasd ≫ Corenet1 Version1.19
Nasd ≫ Corenet1 Version1.24
Nasd ≫ Corenet1 Version2.7
Nasd ≫ Corenet1 Version2.8
Nasd ≫ Corenet1 Version2.9
Nasd ≫ Corenet1 Version2.11
Nasd ≫ Corenet1 Version2.12
Nasd ≫ Corenet1 Version2.13
Nasd ≫ Corenet1 Version2.14
Nasd ≫ Corenet1 Version2.15
Nasd ≫ Corenet1 Version2.16
Nasd ≫ Corenet1 Version2.17
Nasd ≫ Corenet1 Version2.18
Nasd ≫ Corenet1 Version2.19
Nasd ≫ Corenet1 Version3.2
Nasd ≫ Corenet1 Version3.11
Nasd ≫ Corenet1 Version3.12
Nasd ≫ Corenet1 Version3.13
Nasd ≫ Corenet1 Version3.14
Nasd ≫ Corenet1 Version3.15
Nasd ≫ Corenet1 Version3.16
Zu dieser CVE wurde keine CISA KEV oder CERT.AT-Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.31% 0.506
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 5 10 2.9
AV:N/AC:L/Au:N/C:N/I:N/A:P
Es wurden noch keine Informationen zu CWE veröffentlicht.