29
Reference Description
CVE-2007-5893 HTTP request with missing protocol version number leads to crash
https://www.cve.org/CVERecord?id=CVE-2007-5893
CVE-2006-6658 request with missing parameters leads to information exposure
https://www.cve.org/CVERecord?id=CVE-2006-6658
CVE-2008-4114 system crash with offset value that is inconsistent with packet size
https://www.cve.org/CVERecord?id=CVE-2008-4114
CVE-2006-3790 size field that is inconsistent with packet size leads to buffer over-read
https://www.cve.org/CVERecord?id=CVE-2006-3790
CVE-2008-2309 product uses a denylist to identify potentially dangerous content, allowing
attacker to bypass a warning
https://www.cve.org/CVERecord?id=CVE-2008-2309
CVE-2008-3494 security bypass via an extra header
https://www.cve.org/CVERecord?id=CVE-2008-3494
CVE-2008-3571 empty packet triggers reboot
https://www.cve.org/CVERecord?id=CVE-2008-3571
CVE-2006-5525 incomplete denylist allows SQL injection
https://www.cve.org/CVERecord?id=CVE-2006-5525
CVE-2008-1284 NUL byte in theme name causes directory traversal impact to be worse
https://www.cve.org/CVERecord?id=CVE-2008-1284
CVE-2008-0600 kernel does not validate an incoming pointer before dereferencing it
https://www.cve.org/CVERecord?id=CVE-2008-0600
CVE-2008-1738 anti-virus product has insufficient input validation of hooked SSDT functions,
allowing code execution
https://www.cve.org/CVERecord?id=CVE-2008-1738
CVE-2008-1737 anti-virus product allows DoS via zero-length field
https://www.cve.org/CVERecord?id=CVE-2008-1737
CVE-2008-3464 driver does not validate input from userland to the kernel
https://www.cve.org/CVERecord?id=CVE-2008-3464
CVE-2008-2252 kernel does not validate parameters sent in from userland, allowing code
execution
https://www.cve.org/CVERecord?id=CVE-2008-2252
CVE-2008-2374 lack of validation of string length fields allows memory consumption or buffer
over-read
https://www.cve.org/CVERecord?id=CVE-2008-2374
CVE-2008-1440 lack of validation of length field leads to infinite loop
https://www.cve.org/CVERecord?id=CVE-2008-1440
CVE-2008-1625 lack of validation of input to an IOCTL allows code execution
https://www.cve.org/CVERecord?id=CVE-2008-1625
CVE-2008-3177 zero-length attachment causes crash
https://www.cve.org/CVERecord?id=CVE-2008-3177
CVE-2007-2442 zero-length input causes free of uninitialized pointer
https://www.cve.org/CVERecord?id=CVE-2007-2442
CVE-2008-5563 crash via a malformed frame structure
https://www.cve.org/CVERecord?id=CVE-2008-5563
CVE-2008-5285 infinite loop from a long SMTP request
https://www.cve.org/CVERecord?id=CVE-2008-5285
CVE-2008-3812 router crashes with a malformed packet
https://www.cve.org/CVERecord?id=CVE-2008-3812
CVE-2008-3680 packet with invalid version number leads to NULL pointer dereference
https://www.cve.org/CVERecord?id=CVE-2008-3680
CVE-2008-3660 crash via multiple "." characters in file extension
https://www.cve.org/CVERecord?id=CVE-2008-3660
MemberOf Relationships
CWE Version 4.14
CWE-20: Improper Input Validation
CWE-20: Improper Input Validation